Was this mail really sent from my account ?

Question

Hi everyone,

I received this mail from my own email and the message claims it was sent with my account.

Is it a technical trick or did they use my password ?

here is the mail in question with headers

Received: from AS8P193MB2333.EURP193.PROD.OUTLOOK.COM (::1) by

AM6P193MB0407.EURP193.PROD.OUTLOOK.COM with HTTPS; Mon, 9 Jun 2025 13:14:59

+0000

Received: from BN9PR03CA0460.namprd03.prod.outlook.com (2603:10b6:408:139::15)

by AS8P193MB2333.EURP193.PROD.OUTLOOK.COM (2603:10a6:20b:444::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8769.37; Mon, 9 Jun

2025 13:14:59 +0000

Received: from BN1PEPF00006001.namprd05.prod.outlook.com

(2603:10b6:408:139:cafe::32) by BN9PR03CA0460.outlook.office365.com

(2603:10b6:408:139::15) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8792.35 via Frontend Transport; Mon,

9 Jun 2025 13:14:58 +0000

Authentication-Results: spf=fail (sender IP is 45.134.156.205)

smtp.mailfrom=hotmail.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=hotmail.com;

Received-SPF: Fail (protection.outlook.com: domain of hotmail.com does not

designate 45.134.156.205 as permitted sender)

receiver=protection.outlook.com; client-ip=45.134.156.205;

helo=clearpeakstone.net;

Received: from clearpeakstone.net (45.134.156.205) by

BN1PEPF00006001.mail.protection.outlook.com (10.167.243.233) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8835.15 via Frontend Transport; Mon, 9 Jun 2025 13:14:57 +0000

X-IncomingTopHeaderMarker: OriginalChecksum:D5DA867410A512461B61C0D5FEC57B7513340555A697C78B244D2F344C6D3222;UpperCasedChecksum:0F8FCE6A2741272CCEFEF27023EDD04D144B901736B0458F2B5BC9F6BEB5EE82;SizeAsReceived:327;Count:7

Message-ID: <___@___.___>

From: "___@___.___"

To:

Subject: ___@___.___

Date: Mon, 9 Jun 2025 06:14:55 -0700

Content-Type: multipart/alternative;

boundary="812bdaa6b5715e6546ec508b7ef5e3e952"

X-IncomingHeaderCount: 7

Return-Path: ___@___.___

X-MS-Exchange-Organization-ExpirationStartTime: 09 Jun 2025 13:14:58.2012

(UTC)

X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit

X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000

X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit

X-MS-Exchange-Organization-Network-Message-Id: c2fbbeca-9497-4122-6ac8-08dda757a237

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-Exchange-Organization-MessageDirectionality: Incoming

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN1PEPF00006001:EE_|AS8P193MB2333:EE_|AM6P193MB0407:EE_

X-MS-Exchange-Organization-AuthSource: BN1PEPF00006001.namprd05.prod.outlook.com

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-UserLastLogonTime: 6/9/2025 12:48:57 PM

X-MS-Office365-Filtering-Correlation-Id: c2fbbeca-9497-4122-6ac8-08dda757a237

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 45.134.156.205

X-SID-PRA: ___@___.___

X-SID-Result: FAIL

X-MS-Exchange-Organization-SCL: 5

X-Microsoft-Antispam: BCL:0;ARA:1444111002|461199028|58200799018|3025599003|13020799006|47200799021|83100799006;

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Jun 2025 13:14:57.5354

(UTC)

[ Forum Moderator removed unneeded section of header example. ]

Answer 1

Hi, I'm Diane and I'm happy to help you today.

>>

Authentication-Results: spf=fail (sender IP is 45.134.156.205)

smtp.mailfrom=hotmail.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=hotmail.com;

Received-SPF: Fail (protection.outlook.com: domain of hotmail.com does not

designate 45.134.156.205 as permitted sender)

receiver=protection.outlook.com; client-ip=45.134.156.205;

helo=clearpeakstone.net;

Received: from clearpeakstone.net (45.134.156.205) by

>>

This was not sent from someone who got into your account. They faked the from address and sent it from an outside server.

Let me know how it goes, I'm here to help you further if needed.

-- Diane