It does sound like a scam, but if you've ever tried to use a Microsoft account (I have to sometimes for work) you'll eventually land on a pile of domains that look like scams, and bizarrely want you to type in your password in a UI from the 90s among other things.
(as an aside, I like UIs from the 90s but it's jarring when you fall out of the regular glossy experience into like totallylegitimatemicrosoftazure.com or whatever)
(as an aside, I like UIs from the 90s but it's jarring when you fall out of the regular glossy experience into like totallylegitimatemicrosoftazure.com or whatever)