Hey Jonny,   Another quick tip is to always make sure you verify the security of the certificate on your browser. Whenever you visit an HTTPS page (which is most of them now), ensure you have the little lock symbol next to the URL and that it is green (if you are using Chrome) or not barred (looking at your screenshot above). As a rule of thumb, if it doesn't have the lock, do not input any personal information like email address, passwords, bank details, etc.. For common websites like Microsoft.com you can also go deeper and verify the certificate by clicking on the lock and check who has issued it. The issuers are always the same (Verisign, Comodo, Entrust, etc.).   Aside from that, I agree with everybody here and it does look like an attack aimed at capturing your information.    Hope this helps! Giacomo   ... View more