Forum Discussion
Phising e-mail from microsoft domain?!
Hello,
I got this e-mail today and it was in my Junk folder so I thought it was phishing email. But once I opened it sender had microsoft.com in email as domain. After inspecting similar e-mails I noticed that the structure of this e-mail is nothing like when Outlook sends this e-mail.
My question is how the hell did the sender use Pernille-Eskebo.com domain for his/hers email?
Here is the e-mail:
Hi usanzadunje ,
It's a good catch from your end, as this is definitely a phishing email. See below.
Dkim, dmarc, spf failed... There is no doubt that message was tagged to go to junk, but I also see that action=oreject might have been the reason it went to Inbox.
Hopefully you won't have these issues in the future, but if you suspect to anything you can analyze the heard, go to Message Header Analyzer (mha.azurewebsites.net) and paste the header.
Hi usanzadunje ,
In order to be 100% certain that your account is safe, please visit: https://account.microsoft.com/security?lang=en-US and check Sign-in activity.
I have seen legitimate emails from Microsoft in the junk folder in the past.
Yeah I checked. There is nothing similar to information I got in that e-mail.
So now I am convinced that it is 100% phishing e-mail.
Could you maybe explain how did that e-mail used microsoft.com domain as sender?This is really "scary" since it comes from Microsoft and you said that you have seen legit Microsoft e-mails go in Junk, there is no way to know if this is phishing or not.
Many will click links right away, others might check domain if they were burnt before but even those who do check it are going to get tricked. Luckily I do not trust anyone when it comes to these kind of things.Hi usanzadunje ,
Thanks for your reply. It is challenging to understand what is happening because we don't have access to the mailbox, but would you be able to View message source and upload the logs? Thanks!
Hi, is your guess browser Edge?
Are you using a third-party Outlook extension?Deleted
Nope, I am using Brave, not 3rd party extension. I just went on live.com website as I always do to check my e-mail.
