And their newer, suspicious-looking domains:

1drv.ms (OneDrive file sharing)

microsoftonline.com (something to do with Azure)

b2clogin.com (replacement for microsoftonline.com)