I’ve been using some Microsoft services recently, found some bugs in their APIs,I don’t even bother reporting the issues anymore as it will never be solved.
I really don't know what a phishing site looks like because there is a whole spectrum from exactly the same as the original to something that clearly looks like a knockoff.