My apologies, this is slightly off-topic but there doesn't appear to be a Windows Live ID forum on TechNet (I've posted this in the Windows Live support forums, but having a TecNet subscription I wanted to ask here as well). I accidentally entered the address www.hotmmail.com (with 2 Ms) into my browser and signed in to hotmail. It redirected me to login.live.com as normal, and was secured with a valid Verisign certificate. An IPWHOIS lookup implies that the domain is Microsoft-owned. However, an NSLOOKUP suggests that the domain name does not point to the same server as hotmail.com I am wondering if anyone knows if Microsoft bought this domain to protect people who make my mistake, or if I have just given my username and password to some very clever baddies? Thanks in advance .Dave

Hello, If it allowed you to log in the first time and see your e-mail it's likely OK although it could be an MIM style attack. Don't worry though, I checked it out and it's registed to MS, the DNS servers msft.net are also registered to MS. The DNS servers are also registered to the same registrar as microsoft.com. So the likely scenarion is that it belongs to MS. Best practice states that when you are not 100% sure about authenticity, change your password. Can't hurt. CheersMiguel Fra / Falcon IT Services Computer & Network Support, Miami, FL Visit our Knowledgebase and Support Sharepoint Site

Thanks Miguel I didn't think to check the DNS server ownership, I'll remember that for the future. I already changed my password anyway, as you say anything less than 100% sure is not sure enough. Much appreciated .Dave

I already changed my password anyway, .Dave Smart man!Miguel Fra / Falcon IT Services Computer & Network Support, Miami, FL Visit our Knowledgebase and Support Sharepoint Site