Is this a spoof email mimicking my email ID

Question

Is this a spoof email mimicking my email ID

Anonymous

I received an email from my own ID, it looks extremely legitimate. Upon some research, I pulled out the source. Please find below. Please help identify if this is a spoof ID or should I take it seriously. I have already checked all my access and changed my passwords etc.

SA1PR12MB8163.namprd12.prod.outlook.com with HTTPS; Mon, 29 Jul 2024 12:52:30

+0000

Received: from BN0PR03CA0019.namprd03.prod.outlook.com (2603:10b6:408:e6::24)

by MN6PR12MB8516.namprd12.prod.outlook.com (2603:10b6:208:46f::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7807.25; Mon, 29 Jul

2024 12:52:29 +0000

Received: from B***********od.outlook.com

(2603:10b6:408:e6:cafe::f2) by B********9.outlook.office365.com

(2603:10b6:408:e6::24) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.34 via Frontend

Transport; Mon, 29 Jul 2024 12:52:29 +0000

Authentication-Results: spf=fail (sender IP is 7********2)

smtp.mailfrom=hotmail.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=hotmail.com;

Received-SPF: Fail (protection.outlook.com: domain of hotmail.com does not

designate 7***********2 as permitted sender) receiver=protection.outlook.com;

client-ip=7********12; helo=me89.com;

Received: from me89.com (7********2) by

B**********9F.mail.protection.outlook.com (1**********0) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7828.19 via Frontend Transport; Mon, 29 Jul 2024 12:52:28 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:88F92A1AF9691B1F9F890F8D2CB149357643182DE31141C82CBE895B180FE467;UpperCasedChecksum:CC8A92837437189864B5F92F855105D5F49E03BD2D82B84FF67CEF031F59C9F3;SizeAsReceived:303;Count:7

Message-ID: <a*****************@hotmail.com>

From: s****************@hotmail.com

To: s*****************@hotmail.com

Subject: You've been hacked

Date: Mon, 29 Jul 2024 05:52:27 -0700

Content-Type: multipart/alternative; boundary="a2b9f0238228020c2f85cc0460a5aead4996"

X-IncomingHeaderCount: 7

Return-Path: sajalmitta******@hotmail.com

X-MS-Exchange-Organization-ExpirationStartTime: 29 Jul 2024 12:52:29.1966

(UTC)

X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit

X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000

X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit

X-MS-Exchange-Organization-Network-Message-Id:

d05836d8-c016-41f0-647c-08dcafcd4e06

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-Exchange-Organization-MessageDirectionality: Incoming

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic:

BN2PEPF0000449F:EE_|MN6PR12MB8516:EE_|SA1PR12MB8163:EE_

X-MS-Exchange-Organization-AuthSource:

BN2PEPF0000449F.namprd02.prod.outlook.com

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-UserLastLogonTime: 7/29/2024 2:48:21 AM

X-MS-Office365-Filtering-Correlation-Id: d05836d8-c016-41f0-647c-08dcafcd4e06

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 7**********2

X-SID-PRA: S**************L.COM

X-SID-Result: FAIL

X-MS-Exchange-Organization-PCL: 2

X-MS-Exchange-AtpMessageProperties: SA|SL

X-MS-Exchange-Organization-SCL: 5

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|9800799012|58200799015|47200799018|461199028|2980499032|440099028|3412199025|1360799030|1370799030|1290799027|7310799015|7112599012|1710799026|7110799015;

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jul 2024 12:52:28.7591

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: d************6

X-MS-Exchange-CrossTenant-Id: 8*****************aa

X-MS-Exchange-CrossTenant-AuthSource:

B*************d.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN6PR12MB8516

X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.0210860

X-MS-Exchange-Processed-By-BccFoldering: 15.20.7807.009

X-Microsoft-Antispam-Mailbox-Delivery:

ucf:0;jmr:0;ex:0;psp:1;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000308)(920221119095)(90000117)(920221120095)(90011020)(91015020)(90015022)(91040095)(9050020)(9080021)(9100341)(1018006)(944500132)(2008001181)(4810010)(4910033)(10005027)(9620004)(9525003)(10150021)(9320005)(9245025)(120001)(1110175);RF:JunkEmail;

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?TTFSQzc4bGx6MmtMTjhxVCs5cGdRT3ZKUEFsOTBDeWZhd1lYbmxZdVdYTE1U?=

=?utf-8?B?RS9pK3V5M1F4b1lVODZFT0g4KzlzMzdqdWxmbi9ER29tdFJ0OHlyUEw3bEo1?=

=?utf-8?B?ZUw0L2FIa1lWZi9yN0g2aTJleDFSbjVjM3J3aVhtTzczeEtPcmE1ZnpjcVhk?=

=?utf-8?B?Zm9rTWQ4S2dpOTZLR1l3TlpqMmduMzIrcEJDMkY0ZEIxQlMxR2hOSmhTRTNz?=

=?utf-8?B?NGIyV2JpeTNleGk2bCs5d1MrYUJGQm5tQ0hkd2ZiUko3TEhBLzg3OVNqQWJL?=

=?utf-8?B?Q2RaaTZpaEovZFRhRGlpUnBmQWdaNjVpREVkN2t3d29FcVZKR0IzbDBSa1Rz?=

=?utf-8?B?MGk1Zzd2Nm9jamdtcnBvVmpDU08zNHMzdDJYQ1JJWTBhU1Zrek9YS000aHlL?=

=?utf-8?B?NVpsWldIcG5BaWd1cWtXcGpWRXovclF0am5aZmh5WE1xY0xsMDBWLzJyaHRo?=

=?utf-8?B?ZUoyaUM3aHpaTStZNmIvTDREZFlrQ2c1OHBwZ1RHNFI5eEwwTi9kNUlvblgr?=

=?utf-8?B?UTJMK0xGcEJ3eThsaWpacFl4WmJuQU10ZDlNSVFMcGVOTzF5R1NJdkZDYUs5?=

=?utf-8?B?NWkxZTJxWGVWSmFvTDVaZEZhYWxDVVlnSG5rSDlwdlAxYksvZ051N2NKVUN6?=

=?utf-8?B?ZzlOK2tiRmk3NHdzY2QyTXdYVFBOdGZrZGV2b2trbS9tK3YybWl5TUlGTDVm?=

=?utf-8?B?N0FNNUlNWk93d1YrdXhTSTVZS0wyVVpKSTNIQmoxWDRpQ3lhRTZkQjM1blJO?=

=?utf-8?B?Ym9oUFUybXJadmFnNFVwdGJDdkxrQnJMUlVYS2ZIaEwvcHIvQVhnS3VqaE5O?=

=?utf-8?B?V0paR3VrOUxGNnpCSGhWMXh6cHozUFhpanUrMFZOWDlBMVFPOVZndTRBSDkr?=

=?utf-8?B?NXVZTHBGTjNpYXVrcnRsc3NtSWtJWTY1SnF2bXQ0THJQQ3R6YmVGV09MY2pY?=

=?utf-8?B?MXpFZUY1a3pnM3JoSS9GWXFkay9JZWI0RlNkZjFYRzg2YWJRZG9jVy93V2FQ?=

=?utf-8?B?TXRwTXI5YjRCaXlGV0RVKzNUOFQ5Y0ZkaXkwTEE2WThhcVM3V1NpR0hIU0JI?=

=?utf-8?B?citCTTlsMVJMOWtVQWxBM3BVKzJNZlA3NlJFQlZ5cWdzZlBvM0hkVmc0aXJD?=

=?utf-8?B?NEtKejZVMUVqQ1F5YXpyMEVPSFlsZXFkVlNvNng2WHhBTVFjMHV0RVVYaFg3?=

=?utf-8?B?UGkzMlJzcjBlYmgzZWhOSXZtVnBtd1Q1S04wVy9sbEJxeExFLytWMnBZbkND?=

=?utf-8?B?K1Q4bUdUYW1jZDZsQ2t5V2dXTlNmMU9qZ0trdk1pbDdqYWxRRWxKME1WLzlW?=

=?utf-8?B?bUd4ZERCclZrMU04dDhTK3l0Ym04VjRzaWY4M3lYWEM3YTJvYktmUjlrTXlt?=

=?utf-8?B?Z1FGVkt5cHQ1aGt5T1FleG12OU5DamlCVlBQTnNDSXZpQzYyOTNocGJmM1VB?=

=?utf-8?B?NUI3dkdaaGJJcWlSUGxxZU8ySFBoY3h5azh6aTVhdXNmTzJDMXd1cnNLL2pH?=

=?utf-8?B?bUlDY0o3ZExXeFFRbmd5OHdtQ2RMVEdPUHJwZTJkeUlzQUNQbGFKZnVvRnpL?=

=?utf-8?B?ckV5OXpNNHBIM2NHV3JVT3dPcHllTTVmVzc0cVpCSm9lRHQwU05PTVYvM05J?=

=?utf-8?B?WGRZelBTTllMeDc3TFRjc3N5VG01VUcxcWZUZTg3QjhkSkI5TnF1c1Q1Z1ZU?=

=?utf-8?B?WE1SMFBFQTZYTEtrUlBaRVcza2VDUk9uaXlIeXpnSkpvc2U1ckM0SVN2clFt?=

=?utf-8?B?V2pCTFoxRFZwcGVUbmZHTUxXY0pjUmlBMk1xL3JtMjVmUDlJU25TSEF0enFP?=

=?utf-8?B?dUFoOG1wWVd2RHFqc0tXUWdycDYrUUR2OTlMZlVyQVhRa0Vhb3lMeWFVREs5?=

=?utf-8?B?NmpWMnBLOFJMV2pxRjk0bE0xQ0xVYUVMaHRlRS9qbjhVRFNBTU55b1ZHeEZN?=

=?utf-8?B?NHd5L2cyQ0oyNXVuU2FVd0hsUHBpdmxUQmpidUVWR3JUKzJ1YTBQR3hCL1BG?=

=?utf-8?B?YS92WXFGbmhvSkVZbndzbHZXRGduOU9HWWwrZHpSWkZMUXhPZCtjL3ZzR3k0?=

=?utf-8?B?TDk2Uit2ZDErUFlGeDdZa1pNZWVDbVRJL2htdk0yY0d3Q1grUDZZT0lVeEJx?=

=?utf-8?B?RTZjY2Y5bVVMSnhad2ZnRGpuNlp6TUJGR3hIenUyWm9sNjI2SmF6R3djTHNq?=

=?utf-8?B?M3RnQWpSdXpyNk5kRHpFU2hzYU1LeEYxQ0hxVXlqa1ArcFNYcW9rRFdwVXhs?=

=?utf-8?B?VWhuUEZJRHF4ZmlBK1dPWkhndTRRQXJKY1dyV2s5UXBBNFhwcE44SUkrSmV6?=

=?utf-8?B?KyszVFl0MU5yN05PNzhRMTl5NEE3OXR0QmhLd2pqY1JWS0NiZzdiRUpLMURu?=

=?utf-8?B?Qk9YQmlxVitMTEFCQ090WHVnVEhxVy9YdjUzaTVrbDBlTnJleHhrTkZpd0c1?=

=?utf-8?B?TXFvSTRaY1FMU1hKRUZKVTdpblI1Znl2b3pkb1pEOEwxa0dFM3hscU9hZ2x4?=

=?utf-8?B?Y3BHQm5UVlhuUWhSK1hCNXJiT1ZaaVI0N242ZFNnS1FUQXd5aS8rM2NBVmVI?=

=?utf-8?B?V1RmSnBvUGl6b3N0dlhRUjRsU25FelVsRFo0MTY4K0lJVWVWZy94MXNhenFl?=

=?utf-8?B?bHU3YlpqK3hpeDFheUJOam5NODcrMFRJWTJzVEpUeC9QamVWSk94dnMrdWpG?=

=?utf-8?B?cEhoc3ZybkFja1drdkplUFN1R3MyNDM2Qzhla2hrMnVuQW45WDJkOXRNYklD?=

=?utf-8?B?NHZkTnl1WnMzOFZkc3AyWjBmL3Z4ZkpPRzhHZWFNa3J1Y2JMUjd5c1pEdW5V?=

=?utf-8?B?ektsMFpnZFpvczQxWTNCbG9uUDRCbGRXbVNxdjB3QkZKdkp2bjBRUVV5S0pZ?=

=?utf-8?B?SzBXZnNYeDVrL3VxbUtvZmUyUzRzTzZNVUdJa2JYcHhJYlIyYmJaT2JUQmpk?=

=?utf-8?B?ejFRREtEUHE0K3g3R1V6ekxxUDZNVmJCWU80VGhGK1puY1Y3SDdFcFBIVVhw?=

=?utf-8?B?OVdhSVNOM05ITEw3amw5d25wSTcwRGh4R1pyUDU3WDVQYlp4NEpoSHdZTnhY?=

=?utf-8?B?RGdEYkt3czNORlhudExnMzdpOTVqKzhJTnJ2ckdkNVFEWUxHdE4xM0lXNFlu?=

=?utf-8?B?UW5vYlVid2F2a1dPZGVsR3V4TDJIL0xKWVpvN3JNVkdCQVBIQkFub1I1OThl?=

=?utf-8?B?NlNaYUIvaEJ6TXJZY0hITGl1UXU5RUJhcG5QZUNmNDh4NjhYNDZzS2JmRVE5?=

=?utf-8?B?VlJKSUd5K01WaVFsTDJnZmFVMnFsam81dWtOS2dSaW80RXRlQUR3dStwaERG?=

=?utf-8?B?K3orSE9iay9XeHBPWmNqakU0NGhoQ1VmMVFsZzlUbVB5OFM1V1paRktJQ05M?=

=?utf-8?B?OThjcHRudHFpTThhd3FCZkQxSWR3NkFRM09mdTJuLytLOWh6SW05T0diRVVl?=

=?utf-8?B?QWc5cFlSc1J2cHlPb3BvWm0vVVBDR3NmTU9OQlVJbWJMRDJBREtLUGtFU3VG?=

=?utf-8?B?YkU2RklUeVg3cXhvdVpRQ1VQRWxldE9BZTBOZ3Y0Yys3bFZraTdoR3VONmM5?=

=?utf-8?Q?sC3r4ikBvnHkfZ?=

MIME-Version: 1.0

--a2b9f0238228020c2f85cc0460a5aead4996

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Hello pervert, I've sent this message from your Microsoft account.

I want to inform you about a very bad situation for you. However, you can=

benefit from it, if you will act wis=D0=B5ly.

Have you heard of Pegasus? This is a spyware program that installs on com=

puters and smartphones and allows hackers to monitor the activity of devi=

ce owners. It provides access to your webcam, messengers, emails, call re=

cords, etc. It works well on Android, iOS, macOS=C2=A0and Windows. I gues=

s, you already figured out where I=E2=80=99m getting at.

It=E2=80=99s been a few months since I installed it on all your=C2=A0d=D0=

=B5vi=D1=81=D0=B5s=C2=A0because you were not quite choosy about what link=

s to click on the int=D0=B5rn=D0=B5t. During this period, I=E2=80=99ve le=

arned about all aspects of your private life, but=C2=A0=D0=BEn=D0=B5 is o=

f special significance to me.

I=E2=80=99ve recorded many videos of you jerking off to highly controvers=

ial=C2=A0=D1=80=D0=BErn videos. Given that the =E2=80=9Cquestionable=E2=80=

=9D genre is almost always the same, I can conclude that you have sick =D1=

=80=D0=B5rv=D0=B5rsi=D0=BEn.

I doubt you=E2=80=99d want your friends, family and co-workers to know ab=

out it. However, I can do it in a few clicks.

Every number in your contact Iist=C2=A0will suddenly receive these vid=D0=

=B5=D0=BEs =E2=80=93 on WhatsApp, on Telegram, on Instagram, on Facebook,=

on email =E2=80=93 everywhere. It is going to be a tsunami that will swe=

ep away everything in its path, and first of all, your f=D0=BErm=D0=B5r l=

ife.

Don=E2=80=99t think of yourself as an innocent victim. No one knows where=

your =D1=80=D0=B5rv=D0=B5rsi=D0=BEn might lead in the future, so conside=

r this a kind of deserved =D1=80unishm=D0=B5nt to stop you.

I=E2=80=99m some kind of God who sees everything. However, don=E2=80=99t =

panic.=C2=A0As we know, God is merciful and forgiving,=C2=A0=C2=A0and so =

do I. But my=C2=A0m=D0=B5r=D1=81y=C2=A0is not free.

Transfer 1350$=C2=A0to my Litecoin (LTC) wallet: ltc1qqk2c505uw6m0wy2tc25=

cf2as82nh947kkh7unl

Once I receive confirmation of the transaction, I will=C2=A0=D1=80=D0=B5r=

manently=C2=A0delete all videos compromising you, uninst=D0=B0ll Pegasus =

from all of your devices, and disappear from your life. You can be sure =E2=

=80=93 my benefit is only money. Otherwise, I wouldn=E2=80=99t be writing=

to you, but destroy your life without a word in a second.

I=E2=80=99ll be notified when you open my email, and from that moment you=

have exactly 48 hours to send the money. If cryptocurrencies are unchart=

ered waters for you, don=E2=80=99t worry, it=E2=80=99s very simple. Just =

google =E2=80=9Ccrypto exchange=E2=80=9D or "buy Litecoin" and then it wi=

ll be no harder than buying some useless stuff on Amazon.

I strongly warn you against the following:

* Do not reply to this email. I've sent it from your Microsoft account.

* Do not contact the police. I have access to all your d=D0=B5vi=D1=81=D0=

=B5s, and as soon as I find out you ran to the cops, videos will be publi=

shed.

* Don=E2=80=99t try to reset or destroy your d=D0=B5vi=D1=81=D0=B5s. As I=

mentioned above: I=E2=80=99m monitoring all your activity, so you either=

agree to my terms or the vid=D0=B5=D0=BEs are =D1=80ublished.

Also, don=E2=80=99t forget that cryptocurrencies are anonymous, so it=E2=80=

=99s impossible to identify me using the provided =D0=B0ddr=D0=B5ss.

Good luck, my perverted friend. I hope this is the last time we hear from=

each other.

And some friendly advice: from now on, don=E2=80=99t be so careless about=

your online security.

--a2b9f0238228020c2f85cc0460a5aead4996

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

</head>

<div>

<div><font face=3D"Calibri">Hello pervert, I've sent this message from your=

Microsoft account.</font></div></div></div>

<div><font face=3D"Calibri">I want to inform you about a very bad situation=

for you. However, you can benefit from it, if you will act wis=D0=B5ly.</f=

ont></div>

<div><font face=3D"Calibri">Have you heard of Pegasus? This is a spyware pr=

ogram that installs on computers and smartphones and allows hackers to moni=

tor the activity of device owners. It provides access to your webcam, messe=

ngers, emails, call records, etc. It works well on Android, iOS, macOS&nbsp=

;and Windows. I guess, you already figured out where I=E2=80=99m getting at=

.</font></div>

<div><font face=3D"Calibri">It=E2=80=99s been a few months since I installe=

d it on all your d=D0=B5vi=D1=81=D0=B5s because you were not quit=

e choosy about what links to click on the int=D0=B5rn=D0=B5t. During this p=

eriod, I=E2=80=99ve learned about all aspects of your private life, but&nbs=

p;=D0=BEn=D0=B5 is of special significance to me.</font></div>

<div><font face=3D"Calibri">I=E2=80=99ve recorded many videos of you jerkin=

g off to highly controversial =D1=80=D0=BErn videos. Given that the =

=E2=80=9Cquestionable=E2=80=9D genre is almost always the same, I can concl=

ude that you have sick =D1=80=D0=B5rv=D0=B5rsi=D0=BEn.</font></div>

<div><br><font face=3D"Calibri">I doubt you=E2=80=99d want your friends, fa=

mily and co-workers to know about it. However, I can do it in a few clicks.=

</font></div>

<div><font face=3D"Calibri">Every number in your contact Iist will sud=

denly receive these vid=D0=B5=D0=BEs =E2=80=93 on WhatsApp, on Telegram, on=

Instagram, on Facebook, on email =E2=80=93 everywhere. It is going to be a=

tsunami that will sweep away everything in its path, and first of all, you=

r f=D0=BErm=D0=B5r life.</font></div>

<div><br><font face=3D"Calibri">Don=E2=80=99t think of yourself as an innoc=

ent victim. No one knows where your =D1=80=D0=B5rv=D0=B5rsi=D0=BEn might le=

ad in the future, so consider this a kind of deserved =D1=80unishm=D0=B5nt =

to stop you.</font></div>

<div><font face=3D"Calibri">I=E2=80=99m some kind of God who sees everythin=

g. However, don=E2=80=99t panic. As we know, God is merciful and forgi=

ving, and so do I. But my m=D0=B5r=D1=81y is not free.=

</font></div>

<div><font face=3D"Calibri">Transfer<strong> 1350$</strong> to my Lite=

coin (LTC) wallet:<strong> ltc1qqk2c505uw6m0wy2tc25cf2as82nh947kkh7unl</str=

ong></font></div>

<div><font face=3D"Calibri">Once I receive confirmation of the transaction,=

I will =D1=80=D0=B5rmanently delete all videos compromising you,=

uninst=D0=B0ll Pegasus from all of your devices, and disappear from your l=

ife. You can be sure =E2=80=93 my benefit is only money. Otherwise, I would=

n=E2=80=99t be writing to you, but destroy your life without a word in a se=

cond.</font></div>

<div><font face=3D"Calibri">I=E2=80=99ll be notified when you open my email=

, and from that moment you have exactly <strong>48 hours</strong> to send t=

he money. If cryptocurrencies are unchartered waters for you, don=E2=80=99t=

worry, it=E2=80=99s very simple. Just google =E2=80=9Ccrypto exchange=E2=

=80=9D or "buy Litecoin" and then it will be no harder than buyin=

g some useless stuff on Amazon.</font></div>

<div><font face=3D"Calibri">I strongly warn you against the following:<br>*=

Do not reply to this email. I've sent it from your Microsoft account.</fon=

t></div>

<div><font face=3D"Calibri">* Do not contact the police. I have access to a=

ll your d=D0=B5vi=D1=81=D0=B5s, and as soon as I find out you ran to the co=

ps, videos will be published.</font></div>

<div><font face=3D"Calibri">* Don=E2=80=99t try to reset or destroy your d=

=D0=B5vi=D1=81=D0=B5s. As I mentioned above: I=E2=80=99m monitoring all you=

r activity, so you either agree to my terms or the vid=D0=B5=D0=BEs are =D1=

=80ublished.</font></div>

<div><font face=3D"Calibri">Also, don=E2=80=99t forget that cryptocurrencie=

s are anonymous, so it=E2=80=99s impossible to identify me using the provid=

ed =D0=B0ddr=D0=B5ss.</font></div>

<div><font face=3D"Calibri">Good luck, my perverted friend. I hope this is =

the last time we hear from each other.</font></div>

<div><font face=3D"Calibri">And some friendly advice: from now on, don=E2=

=80=99t be so careless about your online security.</font></div></body></htm=

l>

--a2b9f0238228020c2f85cc0460a5aead4996--

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

5 answers

Answer 1

I have just received the exact same email - verbatim.

At least, I assume it's verbatim. It reads the exact same just without the html script in between.

Also from my email itself.

Did you ever find out what it was?

It's frustrating there isn't a "report this email" button even for emails supposedly sent from yourself so you can at least bring it to Outlook's attention...

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 3

Hi,

It is a spoofed email that Microsoft found BUT did not mark it as such...

Look at what you submitted:

Received-SPF: Fail (protection.outlook.com: domain of hotmail.com does not

designate 7***********2 as permitted sender) receiver=protection.outlook.com;

client-ip=7********12; helo=me89.com;

Received: from me89.com (7********2) by

B**********9F.mail.protection.outlook.com (1**********0) with Microsoft

Notice 3rd row... me89.com ---- seems to be a Chinese gaming site...

Have seen some of these on friends accounts... and none of them has been "hacked" yet (at least accordning to Microsofts login activity).

Changing password is always good but in this case it is Microsoft that needs to adress the flagging of spoofed adresses better.

Answer 4

Hi SajalM,

You previously received a spoofed email that mimicked your email ID, have you received similar emails in the last few days? Have you tried to improve your account security, such as resetting your password? Activating double verification?

If you think the above answers solved the problem, please tick 'Yes' under the answers you found helpful so that other customers can find a solution faster, thank you for your cooperation.

If you have any other questions, please feel free to contact me and let me know.

Have a nice day.

Best regards

Vivian - MSFT | Microsoft Community Support Specialist

Answer 5

Hi SajalM,

Thank you for using Microsoft products and posting in the community.

I realize you received an email from yourself and I understand how you feel

First of all, what can be confirmed is that this is a scam email! I need to explain to you: because the sender's address in the mail header is forged, the fraudster forges the sender's email address into the victim's incoming email address, so that the victim receives an ‘email from himself’, thus making the victim believe that his email address ‘has been controlled! This is to make the victim believe that their mailbox ‘has been controlled’ to achieve the purpose of fraud.

I can't say for sure that your email address or Microsoft account has been compromised. If this email is simply a threatening scam, then you can simply ignore it and delete it. Please remember not to click on any links in this email, do not reply, and do not make payments to unfamiliar accounts to avoid receiving threats and losses to your account or money!!

I checked in your email feed and the original sender's email seems to be yourself as well, so I still can't rule out the possibility that your account has been compromised, you can check the auto-forwarding feature in your outlook as well as the rule settings to see if there are any anomalous email addresses, and if there are, delete them immediately.

Whilst I can't say for sure that your account has now been compromised, email is still the most vulnerable entry point, so I would suggest that it is necessary for you (as an email user) to tighten up your Microsoft account security.

(1) Change your Microsoft account password

Change your Microsoft account password - Microsoft Support

(2) Set a strong password

(3) Enable double authentication

How to use two-step verification with your Microsoft account - Microsoft Support

Note: First of all, it is recommended to add three or more login and verification methods, in case one of them fails, you can use the other two. Secondly, it is recommended to save the relevant 25-digit recovery code. The reason is that when your account is at dangerous risk and you need to authenticate and your account doesn't have a valid security message set to receive the security code, you can use the 25-digit recovery code to authenticate at that time, so keep that in mind.

Again, remember not to click on any connections in the scam emails, do not reply and do not transfer money to unfamiliar card numbers!!!!

Thank you for your patience and support. I hope that the above information is helpful to you. If there are any more questions, please feel free to get back to me and let me know how you're doing, I'd love to help and look forward to hearing from you!

Have a nice day.

Best regards

Vivian - MSFT | Microsoft Community Support Specialist

Share via

Is this a spoof email mimicking my email ID

5 answers