Is this mail legitimate?

Dear @A K, Pradhip

Thank you for posting your question in the Microsoft Q&A forum.

Based on the details in the email you shared.

Red Flags

1. External Sender Warning The email is flagged as coming from outside your organization, which is unusual for legitimate Microsoft or internal IT communications.
2. Suspicious Sender Address The sender is ******@mail-microsoft.com. Official Microsoft notifications typically come from domains like @microsoft.com or your organization's domain, not mail-microsoft.com.
3. Urgency and Action Link The message says, “Check the messages and decide what should happen to them” with a [Recover messages] button. This is a common phishing tactic to lure you into clicking a malicious link.
4. Generic IT-Support Center Signature Legitimate internal IT emails usually include your company name, contact details, or ticket numbers—not vague terms like “IT-Support center.”

-->This email is very likely a phishing attempt. Do NOT click the “Recover messages” link or provide any credentials.
Recommendations:

1. Report the Email: Use your organization's phishing reporting tool (often in Outlook: Report Message → Phishing).
2. Delete It: After reporting, remove it from your inbox.
3. Verify with IT: If you’re unsure, contact your IT department through official channels—not by replying to this email.

• Microsoft also allows reporting through Outlook’s “Report Phishing” feature.  Here is a reference: Report phishing and suspicious emails in Outlook for admins - Microsoft Defender for Office 365 | M…
• Forward the email as an attachment to: ******@office365.microsoft.com

I hope information above helpful, if you have any other questions, please feel free to reach out

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment" 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.