Share via

unrequested email password reset code

Anonymous
2020-06-11T21:39:13+00:00

I received an email claiming to be a password reset code from Microsoft, from one of my accounts (hotmail) to the  verifiy account.  Both accounts are mine, but I did not request a password reset.  What actions should I take?

Delivered-To: 
Received: by 2002:a25:21d5:0:0:0:0:0 with SMTP id h204csp1244092ybh;
        Thu, 11 Jun 2020 04:55:35 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJx19yFM/v1Gpi4if3eJFlBFfLuqGN44DcIB6H/T3iiJHZNJUwNQghY4M0qUc0EmzjBgCIbA
X-Received: by 2002:a92:60d:: with SMTP id x13mr7000963ilg.156.1591876535415;
        Thu, 11 Jun 2020 04:55:35 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1591876535; cv=pass;
        d=google.com; s=arc-20160816;
        b=CkieoDKYQNtIbxmgqOZBSa+drI0LUD3PFn7mvzLFVdfygWRs9W7t5GzX3wYyBFd3Sh
         8DGtC9jqaThFHJd4q96CNzYboNI3mIBurTLaxgZJMJbL0C0+22cm1fRTKCwtcuW3om0x
         aDNc6+enqgK6uigj4G5dcZT53vaIjNJJwy0m4ip5/TpgF6QpC3Edyc9uQIx/JA5KsUjd
         T512QsTA+fsBNEz4r88SaT5cEk748ZF2c4ML2mmI5DLz3KQE0MWUxqrtUjputhYeBwRZ
         UFxdC8s2tU/ZtuCwfJXx4PIhIXP4KTWZXrkrvwlta06g8R2PCXXIb+nszBx298GcAcd+
         f0rQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:message-id:to:subject:date:from:dkim-signature;
        bh=NHc2Bp1hpU0+OuRNxg5tVtaYWwdRdFK56VUCdfaK82o=;
        b=TrmHV/0q4CHciti67qAnfoOgDkGmPy81JGayHXmKgan4bx1Eqq42LzQtfNWVJtkh+6
         /nuxb+AP1kW2iAzpq4N1lfx9emaDBg+LRZthCp/WnhX9FCiIGlOvBz/mtA5aOul+wHbx
         GhYSBdGSfTbQSZ34c/Kp5MXlKxq8vPiwVS/slJGbJcanOYLtEz1b9grmZvvybftx92ce
         YCOjh+VIvCddj32Zej/p9Dq+3k69NgpcYGxQLrDFB7/4axzLcZ3O6nhJeTWAFwvyTmz9
         LqeSjr/M0bzZnWot5DGG3jm9hAfZxU8TFOs/5xlxfqp+I9ckzN8+i6ziv+B5MSQWf3/6
         xn8Q==
ARC-Authentication-Results: i=2; mx.google.com;
       dkim=pass header.i=@accountprotection.microsoft.com header.s=selector1 header.b=fo9UarC0;
       arc=pass (i=1 spf=pass spfdomain=accountprotection.microsoft.com dmarc=pass fromdomain=accountprotection.microsoft.com);
       spf=pass (google.com: domain of ******@accountprotection.microsoft.com designates 40.107.243.65 as permitted sender) smtp.mailfrom=******@accountprotection.microsoft.com;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=accountprotection.microsoft.com
Return-Path: <******@accountprotection.microsoft.com>
Received: from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12on2065.outbound.protection.outlook.com. [40.107.243.65])
        by mx.google.com with ESMTPS id z13si2657356ilz.63.2020.06.11.04.55.35
        for <xxx
        (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
        Thu, 11 Jun 2020 04:55:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of ******@accountprotection.microsoft.com designates 40.107.243.65 as permitted sender) client-ip=40.107.243.65;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@accountprotection.microsoft.com header.s=selector1 header.b=fo9UarC0;
       arc=pass (i=1 spf=pass spfdomain=accountprotection.microsoft.com dmarc=pass fromdomain=accountprotection.microsoft.com);
       spf=pass (google.com: domain of ******@accountprotection.microsoft.com designates 40.107.243.65 as permitted sender) smtp.mailfrom=******@accountprotection.microsoft.com;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=accountprotection.microsoft.com
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=nAppOZwKxV3K2RHaOVnn5nohyzW2N2XAW6scqe6DtjQ47IEX5emPZhSTOkVgQIYZNLfg+E25LN3uz1+nAE6oJNGT8lk+KS5K/1sSdTlo+vdxNO+klE7AaTF3diqrZt+j691Gp5RJ91UcG0JoQ4VZ3kl9v5QYUoeDAKkcc8JLMXtxix8QY5AFc90NOEegI6XBrlRMjzg4p1y+llHMCbb7j59uP4E0d3ANFImNtJKs+NBgQs+Nxsw1Av4rZOHdaE8o+KcINtFYISmfY6YrASwnL07+ZOo02Tee0GoopN1b7rST0W3boYboNGh4yfGtEQFtNgTrye/LG1BtqE03O0PnFA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=NHc2Bp1hpU0+OuRNxg5tVtaYWwdRdFK56VUCdfaK82o=;
 b=kAlxu8yWP9HSp0bazMCRQne149x4BNUAjDUF118+fvWeWnxcQLvA3YpJf2ORtpwJjuUNFzCgNsu4TXmAfs/7f2bUh5OylmsmoKDNbFzhytZJ4E3h66slZ//FrZW3jHejmLe41pgVPGuVSIEXxqSGunFYt2BKX2yAhSq94S1z3Xa+MdHzLOvG3M7hCw65RnvapOpygg4/P3dYLuhm3SHA/wtI0SqKT0F/+O1SEQw5pbvFCXa24D9/PoTSUOjh+XcmTyvplCD7cdYYk5RG6Qe3dzPmhIFDQyHiP8657nf7TucqEIck41L+oC1VocK3ovJAlzUIhyGOvCgpxWT8Qo7DoA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
 157.55.103.193) smtp.rcpttodomain=gmail.com
 smtp.mailfrom=accountprotection.microsoft.com; dmarc=pass (p=reject sp=reject
 pct=100) action=none header.from=accountprotection.microsoft.com; dkim=none
 (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=accountprotection.microsoft.com; s=selector1;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=NHc2Bp1hpU0+OuRNxg5tVtaYWwdRdFK56VUCdfaK82o=;
 b=fo9UarC0DFXOc3n2YQo/crgrvYTz+VXz/ofG9IaDSBnHhi4Qt7Jof+9h1ggyjON+zb1vdA6b2mWVfBL5Tys6JVxmUI35th6An2qvi9Czd3J7jTwiHLxmc7GwwX9zxQL5gDstbPDosqLMSTNMoVRjUy4WehD8VOYYCisDMRdydPk=
Received: from DM3PR08CA0022.namprd08.prod.outlook.com (2603:10b6:0:52::32) by
 DM6PR16MB3750.namprd16.prod.outlook.com (2603:10b6:5:2bc::23) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.3088.18; Thu, 11 Jun 2020 11:55:34 +0000
Received: from DM6NAM11FT041.eop-nam11.prod.protection.outlook.com
 (2603:10b6:0:52:cafe::e4) by DM3PR08CA0022.outlook.office365.com
 (2603:10b6:0:52::32) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.19 via Frontend
 Transport; Thu, 11 Jun 2020 11:55:34 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 157.55.103.193)
 smtp.mailfrom=accountprotection.microsoft.com; gmail.com; dkim=none (message
 not signed) header.d=none;gmail.com; dmarc=pass action=none
 header.from=accountprotection.microsoft.com;
Received-SPF: Pass (protection.outlook.com: domain of
 accountprotection.microsoft.com designates 157.55.103.193 as permitted
 sender) receiver=protection.outlook.com; client-ip=157.55.103.193;
 helo=accountprotection.microsoft.com;
Received: from accountprotection.microsoft.com (157.55.103.193) by
 DM6NAM11FT041.mail.protection.outlook.com (10.13.172.98) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.3088.18 via Frontend Transport; Thu, 11 Jun 2020 11:55:34 +0000
From: Microsoft account team
<******@accountprotection.microsoft.com>
Date: Thu, 11 Jun 2020 04:55:34 -0700
Subject: Microsoft account password reset
To: xxx
X-Priority: 3
X-MSAPipeline: MessageDispatcherEOP
Message-ID: <4PKUQ47YUAU4.VI5HPBPAVI5Q3@CY1SCH030011859>
X-MSAMetaData:
 =?us-ascii?q?DaWpvYBOR7K3HEHEaMWijXdLKXOwcOOyEz7VjFowXF!ANzcFCxSetNCfWopMU?=
 =?us-ascii?q?cr16rirFZKJkRvYpVsm71IahtXka7ousR1ApAJNWMaQ0aYcFQP3lJP0wwH0LE?=
 =?us-ascii?q?XLDbfqLA$$?=
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=-vcasTKgy+zjjmBqkIuZv/w=="
Return-Path: ******@accountprotection.microsoft.com
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report:
CIP:157.55.103.193;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:accountprotection.microsoft.com;PTR:msnbot-157-55-103-193.search.msn.com;CAT:NONE;SFTY:;SFS:(7916004)(39860400002)(396003)(136003)(346002)(34036004)(376002)(47690400004)(47530400004)(81166007)(52230400001)(15650500001)(6512007)(9686003)(70586007)(574094003)(6486002)(121820200001)(508600001)(166002)(70206006)(10290500003)(186003)(118246002)(6916009)(966005)(8676002)(956004)(336012)(83380400001)(86362001)(5660300002)(316002)(8936002)(2906002)(82310400002)(356005)(3480700007)(26005)(33656002)(33716001)(36736006);DIR:OUT;SFP:1101;
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 35745f08-5a79-4219-e069-08d80dfe592e
X-MS-TrafficTypeDiagnostic: DM6PR16MB3750:
X-Microsoft-Antispam-PRVS:
<******@DM6PR16MB3750.namprd16.prod.outlook.com>
X-MS-Oob-TLC-OOBClassifiers: OLM:8882;
X-Forefront-PRVS: 0431F981D8
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
cFtAlN7UaC+uTMh2n9e8NbjLGxC9Vv5a/kvBSS4JRokI/ETrPxyQnyXpze7nF8hstQXGElLRuFwAfFIMg7giZKecJwji+pL9lWkp04rtOKCMvOT8jtX71LTKdOAw28T/7BGwUtfGLtJCXOMs9Q3RL+7BDY8I6cUbRDeswhAP0NVVupNvkmBnf1NNV2+iy6ZhXQ2tupU9x/QB5dniGMk1U5OjaQQhBnNVGXJcJp2mRvzfLPOUq7GeiJoS9OT3kWE3tH5v7PRGLfuBdMbrjhDA2nXS3VL3XHeBM41ADRzrVHlTohfRvDKntRtSjRhPJFskKIs951Xilx4mfCeu6Kng/n/EkfwL/aRY75oEoTlRmY7P1uKha1GLJpCBVzHezkotBAru31NpwZ4h8n+XqDb/pg==
X-OriginatorOrg: accountprotection.microsoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Jun 2020 11:55:34.1024
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 35745f08-5a79-4219-e069-08d80dfe592e
X-MS-Exchange-CrossTenant-Id: 5ba90553-c2cd-460e-b5fd-ab93ad9155c7
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5ba90553-c2cd-460e-b5fd-ab93ad9155c7;Ip=[157.55.103.193];Helo=[accountprotection.microsoft.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR16MB3750

--=-vcasTKgy+zjjmBqkIuZv/w==
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit

Please use this code to reset the password for the Microsoft account xxx.

Here is your code: 0242976

                If you don't recognize the Microsoft account xxx, you can click https://account.live.com/dp?ft=DV3QG6KAnSaRr*zRmKZmwMDIiRnAMbMfF5TlcfEgJ!1m1SrVYqcNTLJAsEe9OzllO!XJhJxIsG2QD246ySkTXqFfnDNu5Qp6nop9uMG1xHzWkGdqmBE03mMrqdGM9Vn62LECsVWP2z2v9h3lEAZ*7mXLknmiVZ3cI6nbAk5jSTC9TW7sCejNodmkRxjZqNpKzSM!uuLy6nlNmM!I!DsCv0Vve8Qfcs7Qqk*1fJYs5n6IrX3!RGyRP6latXyBaU3MnYdoHFVf6c47ZxlUAyRSx2ZEM7Inkapup8PWYdRuC6fVI*ScWV!zKHcbDttbgANZTQ%24%24 to remove your email address from that account.

Thanks,
The Microsoft account team 
--=-vcasTKgy+zjjmBqkIuZv/w==
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: 7bit

 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr"> 
<head>
<style type="text/css">
 .link:link, .link:active, .link:visited {
       color:#2672ec !important;
       text-decoration:none !important;
 }

 .link:hover {
       color:#4284ee !important;
       text-decoration:none !important;
 }
</style>
<title></title>
</head>
<body>
<table dir="ltr">
      <tr><td id="i1" style="padding:0; font-family:'Segoe UI Semibold', 'Segoe UI Bold', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:17px; color:#707070;">Microsoft account</td></tr>
      <tr><td id="i2" style="padding:0; font-family:'Segoe UI Light', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:41px; color:#2672ec;">Password reset code</td></tr>
      <tr><td id="i3" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Please use this code to reset the password for the Microsoft account <a dir="ltr" id="iAccount" class="link" style="color:#2672ec; text-decoration:none" href="mailto:xxx">xxx</a>.</td></tr>
      <tr><td id="i4" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Here is your code: <span style="font-family:'Segoe UI Bold', 'Segoe UI Semibold', 'Segoe UI', 'Helvetica Neue Medium', Arial, sans-serif; font-size:14px; font-weight:bold; color:#2a2a2a;">0242976</span></td></tr>
      <tr><td id="i5" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">
                
                If you don't recognize the Microsoft account <a dir="ltr" id="iAccount" class="link" style="color:#2672ec; text-decoration:none" href="mailto:xxx">xxx</a>, you can <a id="iLink2" class="link" style="color:#2672ec; text-decoration:none" href="https://account.live.com/dp?ft=DV3QG6KAnSaRr*zRmKZmwMDIiRnAMbMfF5TlcfEgJ!1m1SrVYqcNTLJAsEe9OzllO!XJhJxIsG2QD246ySkTXqFfnDNu5Qp6nop9uMG1xHzWkGdqmBE03mMrqdGM9Vn62LECsVWP2z2v9h3lEAZ*7mXLknmiVZ3cI6nbAk5jSTC9TW7sCejNodmkRxjZqNpKzSM!uuLy6nlNmM!I!DsCv0Vve8Qfcs7Qqk*1fJYs5n6IrX3!RGyRP6latXyBaU3MnYdoHFVf6c47ZxlUAyRSx2ZEM7Inkapup8PWYdRuC6fVI*ScWV!zKHcbDttbgANZTQ%24%24">click here</a> to remove your email address from that account.
            </td></tr>
      <tr><td id="i6" style="padding:0; padding-top:25px; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">Thanks,</td></tr>
      <tr><td id="i7" style="padding:0; font-family:'Segoe UI', Tahoma, Verdana, Arial, sans-serif; font-size:14px; color:#2a2a2a;">The Microsoft account team</td></tr>
</table>
</body>
</html>
--=-vcasTKgy+zjjmBqkIuZv/w==--
Outlook | Web | Outlook.com | Account management, security, and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

1 answer

Sort by: Most helpful
  1. Anonymous
    2020-06-11T21:43:31+00:00

    Hi Screenid,

    Good day! Hope you are doing fine. I am Jennifer, an Independent Advisor and Outlook user like you.

    I analyzed the headers and verified that this is a legitimate password reset request from Microsoft.

    It only means that someone is trying to access your account and ask for password reset.

    My suggestion is to put additional security to your account by following instruction in the link below:

    https://support.microsoft.com/en-ph/help/402647...

    This way your account will be more secured and protected.

    Hope that I am able to help you today.

    Kindly confirm if this resolves the issue or if you still need further assistance.

    Was this answer helpful?

    0 comments No comments