When you visit records.gm.com, you don't actually land on a website. Instead, it sends you straight to a Microsoft login page. That alone is reason to stop and think. Legitimate businesses with login portals usually let you see who they are before asking for credentials. Here, you get nothing: no company name, no contact info, no privacy policy. The domain's WHOIS record is completely missing, which is almost unheard of for a registered site and a strong indicator that someone is hiding their identity.
For a site that's likely handling usernames and passwords, this level of secrecy is unacceptable. The security setup itself looks fine — good encryption, proper browser protections — but that doesn't matter if you can't trust who's on the other end. Before typing any personal information into a page reached through records.gm.com, ask yourself: is records.gm.com a scam? The lack of ownership info and the unexpected redirect are exactly the kind of signs that safety checks are designed to catch. This site does not pass basic legitimacy tests for a login portal.