Msn.com
Office.com
Sharepoint.com
Hotmail.com
Etc, plus all the subdomains they insert before them. It makes it very easy to create phishing emails that look plausible.
microsoftonline.com is one of my favorites. Like how can you look any more scammy :D