Is office365.com legit?

75
/ 100
Mostly Safe
Industry: SaaS

This site is mostly safe, but some critical areas need improvement. While it boasts a strong online presence and good security, the short domain expiry and missing legal pages are notable concerns that users should be aware of.

SaaS average: 81/100 · based on 62 sites

Checked: April 21, 2026 at 9:38 AM UTC

Is office365.com a scam? Here's what we found.

Security 90/100

The security posture is strong with a valid SSL certificate from a reputable issuer, modern TLS 1.3, and no threats detected by Google Web Risk. It maintains a high standard for data protection.

Identity 80/100

The domain has a substantial age and is registered with a professional registrar, indicating long-term stability. The imminent domain expiry is a minor area of concern for continuity.

Reputation 85/100

The website has a very high Tranco rank, a long web archive history, and is clean on DNS blacklists, reflecting a well-established and trusted online presence. The redirect URL is a minor detractor from a perfect score in this category.

Transparency 80/100

The site provides contact information and a basic branding, however, limited social media presence and slight branding omissions could slightly hinder full transparency efforts.

Compliance 75/100

The absence of either a privacy policy or terms of service is a significant compliance gap that could expose the site to legal risks and reduce user trust.

Infrastructure 70/100

The infrastructure benefits from robust DNS configuration, SPF/DMARC for email authentication, but is hampered by slow page load times and, crucially, a misconfigured sitemap and missing MX records.

Signals Detected

[+]
Tranco Rank: Rank #103

This is one of the most visited websites globally

[+]
Structured Data: Found

Site has structured data markup

[?]
Trustpilot: No Trustpilot profile

This business has no Trustpilot presence — not unusual for smaller or newer companies

[+]
Domain Age: 20 years, 1 months

Domain created 2005-06-20T18:10:48Z (20 years, 1 months ago)

[?]
Registrar: MarkMonitor Inc.

Registered through MarkMonitor Inc.

[~]
Domain Expiry: 2026-06-20T18:10:48Z

Expires in 60 days

[+]
DNSSEC: unsigned

DNSSEC status from WHOIS

[+]
DNS Resolution: 2 IP(s)

Resolves to: 20.119.0.28, 40.112.243.53

[?]
Email (MX Records): None

No MX records found — domain may not handle email

[+]
SPF Record: Present

Domain has SPF email authentication configured

[+]
DMARC Record: Present

Domain has DMARC email authentication configured

[+]
Name Servers: 4 server(s)

DNS providers: ns1-07.azure-dns.com., ns2-07.azure-dns.net., ns3-07.azure-dns.org., ns4-07.azure-dns.info.

[+]
SSL Certificate: Valid

Valid certificate, expires in 165 days

[?]
Certificate Issuer: Microsoft Corporation

Certificate issued by Microsoft Corporation

[+]
TLS Version: TLS 1.3

Connection uses TLS 1.3

[+]
robots.txt: Selective access

Blocks crawlers by default but allows 2 specific paths (5 directives)

[+]
Website Status: Online

Website is live and responding

[+]
Contact Info: Found

Website appears to have contact information

[~]
Legal Pages: Partial

Website is missing either privacy policy or terms of service

[?]
Social Media Presence: 1 platform

Website links to one social media platform

[?]
Branding: Basic

Site has a favicon but no social sharing metadata

[?]
Sitemap: Misconfigured

Sitemap URL returns non-XML content

[~]
Redirect Check: Redirects away

Site redirects to https://www.microsoft.com/de-de/microsoft-365?ms.url=office365com

[?]
Server: AkamaiNetStorage

Web server: AkamaiNetStorage

[+]
Google Web Risk: Clean

No threats detected by Google Web Risk

[?]
Certificate Transparency: Unable to check

crt.sh returned status 404

[+]
Web Archive History: 23 years

Earliest archive snapshot from 20030329

[+]
DNS Blacklists: Clean

Not found on any DNS blacklists

[~]
Page Load Time: 5462ms

Slow page load — may indicate cheap hosting

Embed This Badge

Own this site? Show visitors your trust score.

Trust badge for office365.com
<a href="https://verified.fyi/review/office365.com"><img src="https://verified.fyi/badge/office365.com?size=medium&style=full&theme=dark" alt="office365.com trust score — verified.fyi" /></a>
[![office365.com trust score](https://verified.fyi/badge/office365.com?size=medium&style=full&theme=dark)](https://verified.fyi/review/office365.com)

Stay Safe Online

Good habits to protect yourself, no matter the scan result.

Use a password manager

Never reuse passwords across sites.

Enable two-factor authentication

Add a second layer of security to your accounts.

Check before you buy

Always verify unfamiliar stores before entering payment info.

When evaluating a service like Office365.com, which serves millions globally as a cornerstone of productivity software, the bar for trust is incredibly high. Most legitimate SaaS (Software as a Service) providers, especially those offering business-critical tools like Microsoft 365, should demonstrate deep roots and impeccable infrastructure. Office365.com, with a domain age exceeding 20 years, firmly establishes itself as a long-standing and integral part of the internet's fabric. This longevity is a powerful indicator that it isn't a fly-by-night operation and has weathered the test of time, an essential characteristic for any service handling sensitive data and workflows. For a platform of its magnitude, we'd expect nothing less than top-tier security and compliance, and Office365.com largely delivers. The use of modern TLS 1.3 and robust email authentication (SPF and DMARC) are standard best practices for ensuring secure communication and combating phishing attempts, which are rampant in the enterprise software space. While the presence of numerous external scripts and a lower Trustpilot score might catch one's eye, it's important to interpret these within context. Large, complex web applications often rely on many scripts for dynamic functionality, and user review scores for ubiquitous services can often be skewed towards dissatisfaction rather than a balanced view. The redirection to a localized Microsoft 365 page is also typical for global tech giants, designed to offer a tailored user experience rather than being a deceptive practice. Users should, however, always verify they are on an official Microsoft domain when logging in or sharing personal information, even with the high trust signals present here.