Do not type in your office credentials (username/email-address and password) anywhere except into your computer log-on screen, your portable devices first party apps or the below website domains:
- *.office.com
- Portal.office.com
- Outook.com
- *.SharePoint.com
- *.microsoft.com
- Teams.microsoft.com
- Sway.com
An * means anything (in front of the root domain)