microsoft-my.sharepoint.com is a subdomain of Microsoft's SharePoint Online, used as a login portal for personal or team sites. When you visit it, you're immediately redirected to Microsoft's official Azure Active Directory login page — that's a standard, secure authentication flow. Some signals like a missing favicon and a robots.txt file that blocks all crawlers might give you pause, but both are common for SharePoint sites. The favicon is often omitted on subdomains that aren't the main company page, and blocking crawlers is a privacy measure for user content. So is microsoft-my.sharepoint.com a scam? No. The domain resolves to Microsoft's own IP addresses, its SSL certificate is valid and issued by Microsoft, and Google sees no threats. For a SaaS login portal, the most important check is whether the domain is actually owned by the service provider — and here it clearly is. If you're asked to enter credentials, you're on Microsoft's own turf. The site is legit.
In plain English
This is a legitimate Microsoft SharePoint subdomain used for authentication. The redirect to login.microsoftonline.com is standard for Microsoft services. While some technical signals like a missing favicon and blocked crawlers might seem unusual, they are normal for this kind of site. You can trust it as a Microsoft-operated service.
Where the score comes from
Modern security stack: valid Microsoft-issued certificate, enforced HTTPS, and clickjacking protection. No malware or phishing flags. This is exactly what you'd expect from a Microsoft-owned authentication endpoint.
The domain is a subdomain of sharepoint.com, which is unquestionably owned by Microsoft. While the WHOIS shows no separate record for this subdomain, the parent company is one of the most recognizable in the world. No identity ambiguity here.
Clean from blacklists and Google Safe Browsing. The lack of a Wayback Machine snapshot is normal for a login page that isn't meant to be crawled. Not being on the Tranco top million is also expected for a subdomain that serves only authentication.
The organization behind the site is Microsoft, a name you can look up anywhere. The login page itself doesn't have contact info, but that's standard for an authentication endpoint. Microsoft's corporate transparency is world-class.
The site redirects to Microsoft's official login, which includes its own privacy policy and terms. For a SaaS authentication page, the parent company handles compliance obligations. Microsoft is a global leader in regulatory compliance.
Hosted on Microsoft's own network with reliable DNS. DNSSEC isn't enabled, but that's a minor gap for a login page. No email handling is expected. The misconfigured sitemap and blocked crawlers are typical for SharePoint sites.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →