Share via

This is a scam ?

Anonymous
2024-11-13T17:02:54+00:00

Hello community,
I just received this email from Microsoft but i never order anything.
Do you think is a scam ?
Thank you !

Microsoft 365 and Office | Subscription, account, billing | For home | Windows

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2024-11-14T02:00:35+00:00

    Hello,Jordy - Photographe Access-Tv

    Welcome to the Microsoft community!

    I have realized that your issues.

    I'm pretty sure this is a fake email, yesterday and today I've encountered different users receiving the same email as yours.

     Copilot for Microsoft 365 is available on Microsoft 365 on the web, as well as in some regions, and is updated to the software without the need to purchase it in any other way.

    Copilot Pro is also available as a monthly subscription and does not cost $360 as you see in the screenshot.

    These are another two same threads, one in Chinese and one in English, you can compare them with the translation tool.

     XXXXXXXXXonmicrosoft.com是微软的官方邮件吗？ - Microsoft Community

    Email re: Microsoft order for Copilot $360 - phishing attempt? - Microsoft Community

    Feel free to post back if you need further assistance. 

    Thank you for your understanding and patience and I look forward to hearing from you.

    Ryan - MSFT | Microsoft Community Support Specialist

    7 people found this answer helpful.
    0 comments
  2. Anonymous
    2024-11-14T08:17:32+00:00

    Really appreciated Ryan !
    Thanks for your quick reply :)

    0 comments
  3. Anonymous
    2024-11-14T08:39:14+00:00

    Hello,Jordy - Photographe Access-Tv

    Thank you for you reply.

    I am glad I was able to provide your some advice so help the issue. To help other customers who may be facing the same issue, please click ‘Yes’ or "No" underneath the post that had the solution for you. This highlights the information for other customers. Thanks for your cooperation.

    Feel free to post back if you need further assistance. 

    Thank you for your understanding and patience and I look forward to hearing from you.

    Ryan - MSFT | Microsoft Community Support Specialist

    3 people found this answer helpful.
    0 comments
  4. Anonymous
    2024-11-18T02:48:16+00:00

    Hi Ryan,

    I also received the same email on 15Nov24.

    Initially, I also thought that it was a scam email, but upon checking on the Email properties, I realised it seemed the email was out from MICROSOFT. Furthermore, all the URL links in the email is the real Microsoft WEB site so it also doesn't seem to be SCAM email......

    Below is the original Email Header: (I changed my email to xxx@****)

    Return-Path: <bounces+SRS=X2+0P=******@pauletpetstore.onmicrosoft.com>

    Delivered-To: xxx@****

    Received: from biz.w3servers.com 

    by biz.w3servers.com with LMTP 

id cFk1HxVRN2e4HQAAfxXORw 

(envelope-from &lt;bounces+SRS=X2+0P=\*\*\*\*\*\*@pauletpetstore.onmicrosoft.com&gt;) 

for &lt; xxx@\*\*\*\*&gt;; Fri, 15 Nov 2024 21:48:05 +0800

    Return-path: <bounces+SRS=X2+0P=******@pauletpetstore.onmicrosoft.com>

    Envelope-to: xxx@****

    Delivery-date: Fri, 15 Nov 2024 21:48:05 +0800

    Received: from mail-mw2nam12lp2042.outbound.protection.outlook.com ([104.47.66.42]:18823 helo=NAM12-MW2-obe.outbound.protection.outlook.com) 

    by biz.w3servers.com with esmtps  (TLS1.2) tls TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384 

(Exim 4.96.2) 

(envelope-from &lt;bounces+SRS=X2+0P=\*\*\*\*\*\*@pauletpetstore.onmicrosoft.com&gt;) 

id 1tBwg3-0004Lx-2v 

for  xxx@\*\*\*\*; 

Fri, 15 Nov 2024 21:47:59 +0800

    Received: from DM4PR19MB6365.namprd19.prod.outlook.com (2603:10b6:8:a6::22) by

    SA0PR19MB4318.namprd19.prod.outlook.com (2603:10b6:806:8e::20) with Microsoft

    SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

    15.20.8114.20; Fri, 15 Nov 2024 13:47:48 +0000

    Received: from DM4PR19MB6365.namprd19.prod.outlook.com

    ([fe80::9f53:bc7f:8136:5a97]) by DM4PR19MB6365.namprd19.prod.outlook.com

    ([fe80::9f53:bc7f:8136:5a97%6]) with mapi id 15.20.8158.013; Fri, 15 Nov 2024

    13:47:47 +0000

    ARC-Seal: i=4; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;

    b=kS+lyMHUxdJ1cu6xjLnK2Vzl11bQVBM0pTfBazcuYS3ynyn9r9ROTWcjKeEly6YKD8hC0g0vedUNL2qaPWpMRKLjX/uXM/rV22heza7QQm0dsO9KiXvl6ddbeXzZfDbg52468trhcbe6Q2uzvFPGUjAXrHJj3h81k6bgT3qS0jVkc7OZdVpBbRfADvNhNyPddzn6hoLggWLH+iVStBKS/gpeYn0GMzELE/+WQBS2h2pb2UhaBITiCAgg9OZYFOMb5Yc7KSsUaEnU1rrGqyF408gwsCCe8c2VNt//G0bd38ELnRT97UTSqj3bHENCagBcoEAxBQCqpLVX58neVlcVjQ==

    ARC-Message-Signature: i=4; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

    s=arcselector10001;

    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

    bh=9h46AJTjQREsKXgOA5hmBhIaZPoXrrapvnkCwkHtPwo=;

    b=bR3vnAMLgyyKssWbrUOKw4eg5+nFxRzTdLNMA0CLZSNB2lw5Egd59vlBSX4+gggin8Xr571jiQDYjyphl2uZR6+Um7F1DYGEhGW1pb+umgVZafl+B2Q6VMVhMJLBxB+5NzJaI0pFhUSSiHWTOXRIzgl+0wakCGWpIuzk7l7QGhIdELF6FngJ2i47ksf1dKs9AIYBcd3XAGg6Sd9dHqcJm4gn5ohNe4JIzDmuFqOJZgR25k9nMPV/5IXh1XGS+lt1DB/vppFDn6aU4MsXgYXlTRHptIVx3VNRPTYhuwoz4DLr6HBbMKxj5Zjcw5zLOghncjWpoRoWaT5LO5fUN0g/3Q==

    ARC-Authentication-Results: i=4; mx.microsoft.com 1; spf=pass (sender ip is

    52.102.133.62) smtp.rcpttodomain=pauletpetstore.onmicrosoft.com

    smtp.mailfrom=microsoft365updates.onmicrosoft.com; dmarc=pass (p=reject

    sp=reject pct=100) action=none header.from=microsoft.com; dkim=pass

    (signature was verified) header.d=microsoft.com; dkim=pass (signature was

    verified) header.d=microsoft.com; arc=pass (0 oda=1 ltdi=1

    spf=[1,3,smtp.mailfrom=microsoft.com] dkim=[1,3,header.d=microsoft.com]

    dmarc=[1,3,header.from=microsoft.com])

    Received: from SJ0PR05CA0161.namprd05.prod.outlook.com (2603:10b6:a03:339::16)

    by DS1PR19MB8641.namprd19.prod.outlook.com (2603:10b6:8:1dd::20) with

    Microsoft SMTP Server (version=TLS1_2,

    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.17; Fri, 15 Nov

    2024 12:46:36 +0000

    Received: from SJ5PEPF000001C8.namprd05.prod.outlook.com

    (2603:10b6:a03:339:cafe::e8) by SJ0PR05CA0161.outlook.office365.com

    (2603:10b6:a03:339::16) with Microsoft SMTP Server (version=TLS1_2,

    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.18 via Frontend

    Transport; Fri, 15 Nov 2024 12:46:36 +0000

    Authentication-Results: spf=pass (sender IP is 52.102.133.62)

    smtp.mailfrom=microsoft365updates.onmicrosoft.com; dkim=pass (signature was

    verified) header.d=microsoft.com;dmarc=pass action=none

    header.from=microsoft.com;

    Received-SPF: Pass (protection.outlook.com: domain of

    microsoft365updates.onmicrosoft.com designates 52.102.133.62 as permitted

    sender) receiver=protection.outlook.com; client-ip=52.102.133.62;

    helo=CY3PR05CU001.outbound.protection.outlook.com; pr=C

    Received: from CY3PR05CU001.outbound.protection.outlook.com (52.102.133.62) by

    SJ5PEPF000001C8.mail.protection.outlook.com (10.167.242.36) with Microsoft

    SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8158.14

    via Frontend Transport; Fri, 15 Nov 2024 12:46:35 +0000

    ARC-Seal: i=3; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;

    b=BK4cn33FnBPwxCxgmxqCLkLBh2bmt8UpwWF814XNG658y3cR3Hxu2uhdjwYvBwldYkxiu8z9YJWYMuFsTTCYcQh1M5YzfmjNB/ELjHYx/VsMPgALDZPJCTFKskw39JzNJziNDsvMlgAKAvnwAZd/VxsXeb0QbbOAO0E/igeH4GQHdwg50nlGlh1/7J+sDUL1YLdr++psf8bkGYZ+x4nK3vIqdlOY07Qte9KD74WyRxYFHiASH0DfWAQLGIZ7ckD3gipjWzH7xRIBMoyWYOdQ5jWQcRKjGz+BMjvxHffH04KMR44bACgiXhCAqJx0IqkbKp8RxcnOnzpcOLrgqaCuLw==

    ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

    s=arcselector10001;

    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

    bh=9h46AJTjQREsKXgOA5hmBhIaZPoXrrapvnkCwkHtPwo=;

    b=gFEgOeJbf7WwP/oG8o9uVD2ofsB1j5YUXndJbr0LTPqKdQNcM6SaiNHXDfe/rOyV7n8b0AOyU3GVNbuzmTx+hyls0zEC9oxcgdV7aBwe14+phGqQiKYJfE5ufkpyKOaq7/PKpRtJko7NozQPpuAkaRuj6kiAyZU3TH+6iNHztcUFwG9Y7rwiHGmwSonVvSoxOWh/MWp/aQkjWTuZcMGEbCItyqHVF6Km5N5HmSdYPAgKaSAgHYgC9oh0GIkD1TRJuhbrzUpB9OF8IWiYWnYJUJZ61YHU+Rnri+5/6NAux7YDILGg1wAb3KMqZ7Ar2guCinJ7c9fyt6nfVNANFGG83g==

    ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=pass (sender ip is

    2a01:111:f403:d909::) smtp.rcpttodomain=microsoft365updates.onmicrosoft.com

    smtp.mailfrom=microsoft.com; dmarc=pass (p=reject sp=reject pct=100)

    action=none header.from=microsoft.com; dkim=pass (signature was verified)

    header.d=microsoft.com; dkim=pass (signature was verified)

    header.d=microsoft.com; arc=pass (0 oda=1 ltdi=1

    spf=[1,1,smtp.mailfrom=microsoft.com] dkim=[1,1,header.d=microsoft.com]

    dmarc=[1,1,header.from=microsoft.com])

    Resent-From: <******@microsoft365updates.onmicrosoft.com>

    ARC-Seal: i=2; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;

    b=t2K85jjOuAAAguIMV4PGv+Lh9x5S6K8WRveBkKKCvFURscVYNBc9e9cdc5AMb1Know4Dgyguc9jrEBm0qS5GYUU981p3aKG3u4IAUPGirBfTO/LsXYcWybrAgRGAHj3ds1Pgzem7dZKYO7Fvu+zKbOMJ9xJRZD9MWe3UdDRBd+Pyprm9irVVuTqlShpvAeJQ/2Z5nH8066VKbuXadAObQStp/bqvZDPt6s3ntS6KIsQ02jOQzWVf1tYtDzPGu6ZZp/nCP4ys5CfFN7hQzEqYiE+fg7vbbn7GtV8amMmzdjPi1eKCkLdgeOdZKOrkqfA1aXETnpsoFIXnZBngjYOdrQ==

    ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

    s=arcselector10001;

    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

    bh=9h46AJTjQREsKXgOA5hmBhIaZPoXrrapvnkCwkHtPwo=;

    b=BDEmAaSu3hYbsT+ba8HMHPV1WKOSOIvEq2OaYicWDI8Sp0VNNq2cu2pujHCGHj7k7OzVobaFXE2VHOwsXlwnBwrMa4IzHb3sKqXiHnjTwedMPUbTEEzVhsKPiGNpbJ5nYa7HK1jizU0MF/qF0Rj5zfhXi2gk6kBNUV1awdbE7t6dxMX6F3eSPxM9JPfKrmMB/tlMz9TlMENQAg2FsLEKilsx2+OJEPOt1QTZpHH/h/dOH4uU2BwMZD/WwI9UhkXiAvvnJJh7NeRrYlPdF9y82okC0nSSSud0677MYjuepTAXoTbc2wFlR9rw3iRQDuSroTDrf1fabDtCUhAkSdkclQ==

    ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is

    2a01:111:f403:d909::) smtp.rcpttodomain=microsoft365updates.onmicrosoft.com

    smtp.mailfrom=microsoft.com; dmarc=pass (p=reject sp=reject pct=100)

    action=none header.from=microsoft.com; dkim=pass (signature was verified)

    header.d=microsoft.com; dkim=pass (signature was verified)

    header.d=microsoft.com; arc=pass (0 oda=1 ltdi=1

    spf=[1,1,smtp.mailfrom=microsoft.com] dkim=[1,1,header.d=microsoft.com]

    dmarc=[1,1,header.from=microsoft.com])

    Received: from BN8PR04CA0016.namprd04.prod.outlook.com (2603:10b6:408:70::29)

    by IA1PR07MB9855.namprd07.prod.outlook.com (2603:10b6:208:445::17) with

    Microsoft SMTP Server (version=TLS1_2,

    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.18; Fri, 15 Nov

    2024 12:46:25 +0000

    Received: from BN3PEPF0000B373.namprd21.prod.outlook.com

    (2603:10b6:408:70:cafe::42) by BN8PR04CA0016.outlook.office365.com

    (2603:10b6:408:70::29) with Microsoft SMTP Server (version=TLS1_2,

    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.18 via Frontend

    Transport; Fri, 15 Nov 2024 12:46:25 +0000

    Authentication-Results-Original: spf=pass (sender IP is 2a01:111:f403:d909::)

    smtp.mailfrom=microsoft.com; dkim=pass (signature was verified)

    header.d=microsoft.com;dmarc=pass action=none header.from=microsoft.com;

    Received-SPF: Pass (protection.outlook.com: domain of microsoft.com designates

    2a01:111:f403:d909:: as permitted sender) receiver=protection.outlook.com;

    client-ip=2a01:111:f403:d909::;

    helo=BN8PR05CU002.outbound.protection.outlook.com; pr=C

    Received: from BN8PR05CU002.outbound.protection.outlook.com

    (2a01:111:f403:d909::) by BN3PEPF0000B373.mail.protection.outlook.com

    (2603:10b6:40f:fc02::16a) with Microsoft SMTP Server (version=TLS1_3,

    cipher=TLS_AES_256_GCM_SHA384) id 15.20.8182.1 via Frontend Transport; Fri,

    15 Nov 2024 12:46:25 +0000

    ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

    b=EVtmLyBeC1qA0k5B+vBrNCjSvKsXViOoiE99pfoflvNPaAQ1usJ2hzOfUtBVh5RF4L68MgpmlM7EE890jJKES6v/prwl57sV2m5IO8EvJCEJrBZwPp+rtIlAOh1dhYYSby8k0rbyyx6o2u7vyloVAQpyd3Yt+GyiODxRU6nZ70f76XUkRuA1izXN1d80fAEV6QE1IRDiQF18hcR4WW1HhhFGWpmHBXz+cfkpJaF30KI9+O03TY6wq3jA4tg1ceeph515guGjC8oXuFbmxhj8139gd7EnnaWAujEXO/mIbShNxS+190+dV1S3Dd26X0/hirWQoxEE6f2gQV8Y/h0oCw==

    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

    s=arcselector10001;

    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

    bh=9h46AJTjQREsKXgOA5hmBhIaZPoXrrapvnkCwkHtPwo=;

    b=c4X+GnXwrt3FgYajMC73UC8lQbZ3KDEgjRySkpinhmujJypNuHcsEQeupf2GVraBAlMC1ltEQThu5fItda6ky177KoZ+nE3HGOmambDx4K8nqWTNEySLYFdGqpD0a6aLFJkOWrrhLcAHsX/2AhsQDFwoFKFS0AqdL8exGFlKYpVNzayL/6sPMVz5i2ETYGh5aDmsWXshvkyuFAklje2dUhli3zBseC7ux9Bfzx6IqHirZuKoFu3vuECLqPzllS6O9vr3I5DtsEolZRCWaSk7TlKkK8DYdZVRhO5Oaic2yYHtYzcOgpWhj+zIJWrn5SjXQUhPEjwPImYpJ7qFJHE+Kw==

    ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is

    20.83.222.105) smtp.rcpttodomain=microsoft365updates.onmicrosoft.com

    smtp.mailfrom=microsoft.com; dmarc=pass (p=reject sp=reject pct=100)

    action=none header.from=microsoft.com; dkim=pass (signature was verified)

    header.d=microsoft.com; arc=none (0)

    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

    s=selector2;

    h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

    bh=9h46AJTjQREsKXgOA5hmBhIaZPoXrrapvnkCwkHtPwo=;

    b=bA7DKIZXUxEDFcy/4Ne4E31GEbi2u3BfOst38ETCzqP7x6KpWu84GkYcIOXuulg4ojiYOq5+mlEqVHFTqVARCiCZvZKUsCYVlNI1xlvMau/uyZHjh6fK5HQrfEqEuSTVrTNSFJCqraGhGLo6Gm13T3NOh3r1C7Lmv5tzypwguAs=

    Received: from CH2PR16CA0025.namprd16.prod.outlook.com (2603:10b6:610:50::35)

    by PH8PR21MB3901.namprd21.prod.outlook.com (2603:10b6:510:23a::20) with

    Microsoft SMTP Server (version=TLS1_2,

    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8182.9; Fri, 15 Nov

    2024 12:46:21 +0000

    Received: from CH2PEPF00000148.namprd02.prod.outlook.com

    (2603:10b6:610:50:cafe::f8) by CH2PR16CA0025.outlook.office365.com

    (2603:10b6:610:50::35) with Microsoft SMTP Server (version=TLS1_2,

    cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.19 via Frontend

    Transport; Fri, 15 Nov 2024 12:46:20 +0000

    X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 20.83.222.105)

    smtp.mailfrom=microsoft.com; dkim=pass (signature was verified)

    header.d=microsoft.com;dmarc=pass action=none header.from=microsoft.com;

    Received-SPF: Pass (protection.outlook.com: domain of microsoft.com designates

    20.83.222.105 as permitted sender) receiver=protection.outlook.com;

    client-ip=20.83.222.105; helo=mail-nam-cu10-mwh.westus2.cloudapp.azure.com;

    pr=C

    Received: from mail-nam-cu10-mwh.westus2.cloudapp.azure.com (20.83.222.105) by

    CH2PEPF00000148.mail.protection.outlook.com (10.167.244.105) with Microsoft

    SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8158.14

    via Frontend Transport; Fri, 15 Nov 2024 12:46:20 +0000

    DKIM-Signature: v=1; a=rsa-sha256; d=microsoft.com; s=s1024-meo; 

    c=relaxed/relaxed; i=microsoft-noreply@microsoft.com; t=1731674779; 

h=from:subject:date:message-id:to:mime-version:content-type; 

bh=9h46AJTjQREsKXgOA5hmBhIaZPoXrrapvnkCwkHtPwo=; 

b=Bq28tag7lwe6nHtiMMl4Zva3d9iZ4rpGmHufWKNydhoq3xU91tES7VnKLKkwMg/OJsqPfBSbykX 

gKtr5alULljzD5DrPLsvCuUDZRABe27P1faR0Mk7+v2IuKRWWEqjWkqgngoeeEq9IOJv6HJyEk6al 

GKl0sr1/a3e+t5EhXT0=

    From: Microsoft <microsoft-noreply@microsoft.com>

    Date: Fri, 15 Nov 2024 12:46:19 +0000

    Subject: Your Microsoft order on November 15, 2024

    Message-ID: <******@az.westus2.microsoft.com>

    To: ******@microsoft365updates.onmicrosoft.com

    MIME-Version: 1.0

    Content-Type: multipart/alternative; boundary="=-WUpKDqyyish4TT/m1bHTxA=="

    X-EOPAttributedMessage: 2

    X-MS-TrafficTypeDiagnostic: 

    CH2PEPF00000148:EE\_|PH8PR21MB3901:EE\_|BN3PEPF0000B373:EE\_|IA1PR07MB9855:EE\_|SJ5PEPF000001C8:EE\_|DS1PR19MB8641:EE\_|SA0PR19MB4318:EE\_

    X-MS-Office365-Filtering-Correlation-Id: 93715b72-1c11-4411-5b14-08dd05738a98

    X-MS-Exchange-SenderADCheck: 1

    X-MS-Exchange-AntiSpam-Relay: 0

    X-Microsoft-Antispam-Untrusted: BCL:0;ARA:13230040|11053499020;

    X-Microsoft-Antispam-Message-Info-Original: =?us-ascii?Q?mDqtGvh5XOqun391/Mrmv8ubu7lXFQ+OD0bb76oFDaWlI5e+MQBomAsWF+uT?=

    =?us-ascii?Q?KA9xJWZlNBLbbxKNO5SaAkz77CppGzN2Sczoa5WUBIpp4a8ALiZKmW9sbcZB?=

    =?us-ascii?Q?GfXrhgzSawjia7RbmHyAexAv6q+JXEOYdmADfnsRoGnG0/guDEEyXSK6QwXC?=

    =?us-ascii?Q?TGIXKur8InAF86OqyhP9uUOyaP4qzR0pmHw0xF4FIzKGcRmIeycWmmdybY39?=

    =?us-ascii?Q?WLobaxideazQGN/QYpWfyhaZZphIh9UyFeQjQh8qPonK7WNJYTRr64xjkkWV?=

    =?us-ascii?Q?0ZVLsMSHj7tCyZF5skBqbaSK9o69ihzAS+gMvbQ4L2SO8Y01NY8P8cEmWK2o?=

    =?us-ascii?Q?nSc+xZprpjDfKv4DPdvEIOTJah7sM8133L7eb5N3SlMeVbeyq5AjYlUaMjIc?=

    =?us-ascii?Q?ycN2Bl+Lc7PY9Yt9Jl1VR6EWQs0ffwrUuEOqL9QjznslPGNONSmNACRf57zD?=

    =?us-ascii?Q?Q+ZtJhPxENVx9eOUYkb+NfIKzin1BVpIOtRG4lDeeqoh4T8srgPJiftH5Wrd?=

    =?us-ascii?Q?q+DYRdUeqIr6aAb/O1vU0oVz5rjiOGpu2iUGbS9W+yxsgUUzZNiABq4eJ7zF?=

    =?us-ascii?Q?jpP6ZbJ+TnvaeBLpQ0mvmmvcYvNvMjqevTlIsmASANRJdkmEqXPqJ29yq+aq?=

    =?us-ascii?Q?bNSBhL7LDCmUJh3kua0yvAH2EsYJ4nkMZJZ4BKTEHaH5b1IleChuVTB2X3MG?=

    =?us-ascii?Q?DYutcZyLEtZ3FMQoAm92enfBw0Xgn7BTwC8GVPQW6yO4ZdeqxTvUE3/YLy1c?=

    =?us-ascii?Q?hol4fexVQqcGvcNsKvaYU17MnC+tS1xx/IKlGOoWaFtaIrqpmTGkhLGBDFQJ?=

    =?us-ascii?Q?axNow8EKNFePv2xTB+usa12brSyRDGU9GmO2K3Rr6OXcYeB8uuvY+RIV3bRw?=

    =?us-ascii?Q?UAYhFboE409igOvUwupwBJV/2LuLxuCXwbwLmLMoF4Xzow4+KcpWIyE7wcKL?=

    =?us-ascii?Q?tc03wsV/ZJwHSo02qgtoypIZgRJlDZrbL2+Rh/kcyrU+tV+WMR2s1Y9y97Zp?=

    =?us-ascii?Q?O1z//l1EIZiYzL0TEBJKvrpjYyfy3sifVOD3Wbz8d/x+FwoPQjCULUX0XQC2?=

    =?us-ascii?Q?O7oSCB5HTz7KduyF8s7MCQvd6d8BaTJHfjpRjeqhY7woUoq9Hl+oLcgsw6cg?=

    =?us-ascii?Q?Y/wkUOhJb4xzfsZqxWuHenlSxQjS/633TgKjy+wREYIVYklZktOVkBnHf8b/?=

    =?us-ascii?Q?UPRE8xMnudpwFZQuUG2rg4EuVJNy+2/YobE+5pEWOxcVeF62THAA7afPP6ko?=

    =?us-ascii?Q?SNnYlILXFKu92i8o2CkYC24pfIjk1eexpoKtn+JAB4LAILPJBn+ng2HN5yh8?=

    =?us-ascii?Q?mBRsOp4mdbiggMOG3ZWRSXUENjkMe6lO1dKY0HtqnIF4KvwIErHZFN30UY/c?=

    =?us-ascii?Q?ozc50/6WMl1ET21xBSMCajHYM0iM4G3BAL0CpdFwiEkK9BI5XSgK/2Z+1tgi?=

    =?us-ascii?Q?Sk/Anp98dnWOI7JS57K2f4RVlm7/gDtZjphda1LcLc6TjiVyE5jxvyJeZfuM?=

    =?us-ascii?Q?4Xb9mcjaYlTUfL3yRSqIqQiktaw0DmHa6SJEI08BksWl+rnXVOPOQrzb/ymL?=

    =?us-ascii?Q?SqdqUtiSjjWYea7UkLyi2PMXF0M+7tMpUHKMU9gq6yZXMd8KnabEQOA45ry4?=

    =?us-ascii?Q?vJpZn7BDbA4szZBhxSWNFXdL682vqdDp78+PHypTZoxBt/ifzk1mhsfkEtoT?=

    =?us-ascii?Q?7PNKdpiIv/lt3flKUR+aipbYA/HjkChl44IRLQc1ah2ShIQr1f08Btut3QAw?=

    =?us-ascii?Q?TSFoQXphrErE9fgvkdiTUl15pV3AoMXt1I5SQOy9XOu23IleFPgluDJk00TI?=

    =?us-ascii?Q?JO4VVNzLqjCyeyvfOnIAwguCt6Z3s48Z5B3b9GagRAupW8jDFbtMbIA6V6Hl?=

    =?us-ascii?Q?2T1KeyeBMgkwmLbpsR9qa+k2FmL20CDWezGpFQYfl4IFRBKYRCoTfsX/3L2p?=

    =?us-ascii?Q?sObZQl5SKmzamvPtUa+Q4G2VW79D/oy+tRhSLL0iRdZpjkFN6q/4pNBOGOcb?=

    =?us-ascii?Q?wb+k?=

    X-Forefront-Antispam-Report-Untrusted: CIP:20.83.222.105;CTRY:US;LANG:en;SCL:7;SRV:;IPV:NLI;SFV:SPM;H:mail-nam-cu10-mwh.westus2.cloudapp.azure.com;PTR:mail-nam-cu10-mwh.westus2.cloudapp.azure.com;CAT:OSPM;SFS:(13230040)(11053499020);DIR:OUT;SFP:1501;

    X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR21MB3901

    X-MS-Exchange-Transport-CrossTenantHeadersStripped: BN3PEPF0000B373.namprd21.prod.outlook.com

    X-MS-Exchange-Transport-CrossTenantHeadersPromoted: BN3PEPF0000B373.namprd21.prod.outlook.com

    X-MS-Office365-Filtering-Correlation-Id-Prvs: b29c630f-059d-4ca5-6fa4-08dd05738150

    X-LD-Processed: fc80a093-86da-4f5d-b817-b1568e4d7eb0,ExtAddr,ExtFwd

    X-Microsoft-Antispam-Untrusted: BCL:0;ARA:13230040|14060799003|9140799003|34036016|7416014|376014|69100299015|586017|35042699022|48200799018|61400799027|11053499020;

    X-Microsoft-Antispam-Message-Info-Original: =?us-ascii?Q?ogEHrSrn5VINbx8VxM0E3+8jb+8mQZ3FwZSsto2YnjH2RiHpSFuqYMzCjRAl?=

    =?us-ascii?Q?KaM0kF/8LbqeaxSmKh3MP0qiZP3R7QZimVeeooHg0d+H/72OEOgEotrtvbP6?=

    =?us-ascii?Q?juhCVJ61VhpSYFUTFRlJlrXxHhMw4EMW/ANLHZaxRo7py9vNHFfakIrsYbgk?=

    =?us-ascii?Q?CVSAAU3YyzPB8YHUVIoRs2O4kxWRrsEDtbhNE28Dx7Y79Keb2VVmmLx5e0Gs?=

    =?us-ascii?Q?eORAyQp0z73z6dTbCE1rm61Rbccm8zMuB3DledwTbzxiteTBZAa1dQOuOk3b?=

    =?us-ascii?Q?KC/7paHwAm2YvLB71NWp+CJNEPu2d6NZH4JbeemowzZD07pzObHAc0yuQCYQ?=

    =?us-ascii?Q?9jkP7As0iFy7sIJObM1607T+Ip4xvDGaaX0+2VLOFk6OFjm/dOzDDMJwTHSH?=

    =?us-ascii?Q?TT7yaNf+1RxgXm/wM6ZFPudIEZtl0/EBaoaKfZYe4vvFOKg466NlVeyMcG+9?=

    =?us-ascii?Q?BNAtiseAWbt39F3W3JJY7Cku2SYYNIrM2dkUePrcpPJXOScmD/bhlEUZJGQI?=

    =?us-ascii?Q?xYcNyJL+hMYlKEdxWCIa78PlArBIQQwp85r5tUm3tUuhIH7EGOl+Y+Pc6m1B?=

    =?us-ascii?Q?iQ72LCffJsFJPLP8v9z5MDE+bncZC2TGwFxFTTX+aOLpnPRf9sOFv/6/SSwd?=

    =?us-ascii?Q?0ZznPa9KQn7DJRr1kFivmrvWWtymqPt69Fb6shnsS8KgCrdshXltR8rMmwKl?=

    =?us-ascii?Q?b+/iX4P1eaHPRMrr53rgxZ8H2h2PmmkuWTzeTN+XzE/wR/4zUA6OyqMrhSxS?=

    =?us-ascii?Q?Fc9fiM9OfuDthvoCvxNfizaOGSjlQpZWAnq6RVSCFnGgsPGHw+B82FvgQYVy?=

    =?us-ascii?Q?jFi2pz8q7sTkYwviMkstauRjY1Vl59GnSXv+xo6d3CqOS0qP9gClXSQuH0Md?=

    =?us-ascii?Q?6bcR+we5B/wv+9HDYLaAzYpjNR90IRAGh8NYoSBSVPzSyWeCmfaty0efFxNv?=

    =?us-ascii?Q?q2I/EcGex9Ohism4Cy+cYLJo+iOnh6QdtrucxqywjiG5Uvmoj+iv5he4+Xin?=

    =?us-ascii?Q?3yfoBD0I9hWOzn903BA6bke48g+0q9v+P2s29Nh5QhUGPdoED+eSrk7vi3vo?=

    =?us-ascii?Q?lu8W4KqoSA7/5q0VzcFjqDSs1ocL3Ca0ww4gxCD7bvaSXenPp7bgk5CZugwZ?=

    =?us-ascii?Q?6+PFcqTQ7kKUSUuEYfmUDuwQtJqHZzu6wv0tpy6r2MUP5TQj01kLpnYwL6RU?=

    =?us-ascii?Q?WZz2uwtvduYZh8iBJWy5vN/qTdY0uIuFZFC7f6ngTWYS9faHzHWlYvBlKsIo?=

    =?us-ascii?Q?9Zzh+YoyjGP4j3GEiBgK3BATyhEo03+8LIlb690y+3ibKaQ2IswsL4nA7ahh?=

    =?us-ascii?Q?aRhPHnc/JK+WNllWY/WR8cP+lzL4JUlVMumJzETm+Ng/QbWTNG2kvheGUew4?=

    =?us-ascii?Q?m+8/FYd8jBINGnh7pzFcZdAg+B28rgSSOvav4ErJtNOGYHzCRXU5fjYycv0Z?=

    =?us-ascii?Q?fL/2nO0kn26l6nk1BpXJaE/r0aZXmKqchBaTugPBmDMGIus/BMxDJSP6WR0k?=

    =?us-ascii?Q?bcKZun2Kzc/1D4Rbs06jEjPrGS6KXv6khWXN1j9iYGlSSFO7VGhFavVaEHoF?=

    =?us-ascii?Q?gq1ZbXE7ukALU3YUrbDn/nlbTo5nqSLwfFxJ8oC//3lDj5nUTik+gZUSZjCE?=

    =?us-ascii?Q?UJDQXiFRLW4xAJ+9pNa/u2+8feVZk5e6VT4P7gK6yLkgjUrByz71iLPdYaMG?=

    =?us-ascii?Q?SkeuZRvfc0lFsP9E8zuNWW4dyElESg+9jmD2BoF1tQsDD0OA0NHZNidF5Dmt?=

    =?us-ascii?Q?NJ/PaX5vUjBA2eYcB8LsaJfqCtudA8boduvM+txsNESJk6oU3DjCDwOyvess?=

    =?us-ascii?Q?nsmefhVt8W5GlS4WvYUjn7hhmuFetc5sfwgdf2CqN4k/NLa+BCszYSPDPIj+?=

    =?us-ascii?Q?M8uC0Xa2YSFw/MLXftmKqW0jn/CnyBNj22TnHsg=3D?=

    X-Forefront-Antispam-Report-Untrusted: CIP:2a01:111:f403:d909::;CTRY:;LANG:en;SCL:7;SRV:;IPV:NLI;SFV:SPM;H:BN8PR05CU002.outbound.protection.outlook.com;PTR:mail-eastus2azhn150110000.outbound.protection.outlook.com;CAT:OSPM;SFS:(13230040)(14060799003)(9140799003)(34036016)(7416014)(376014)(69100299015)(586017)(35042699022)(48200799018)(61400799027)(11053499020);DIR:OUT;SFP:1501;

    X-ExternalRecipientOutboundConnectors: fc80a093-86da-4f5d-b817-b1568e4d7eb0

    X-Auto-Response-Suppress: DR, OOF, AutoReply

    X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR07MB9855

    X-EOPTenantAttributedMessage: ca4e8232-398e-4ad5-a104-8b5fc1e98270:0

    X-MS-Exchange-Transport-CrossTenantHeadersStripped: SJ5PEPF000001C8.namprd05.prod.outlook.com

    X-MS-Exchange-Transport-CrossTenantHeadersPromoted: SJ5PEPF000001C8.namprd05.prod.outlook.com

    X-MS-PublicTrafficType: Email

    X-MS-Office365-Filtering-Correlation-Id-Prvs:

    f92e19ab-c1e6-41f3-fcc5-08dd05738422

    X-Moderation-Data: 11/15/2024 1:47:47 PM

    X-LD-Processed: ca4e8232-398e-4ad5-a104-8b5fc1e98270,ExtAddr

    X-OriginatorOrg: pauletpetstore.onmicrosoft.com

    X-MS-Exchange-CrossTenant-Network-Message-Id: 93715b72-1c11-4411-5b14-08dd05738a98

    X-MS-Exchange-CrossTenant-Id: ca4e8232-398e-4ad5-a104-8b5fc1e98270

    X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=72f988bf-86f1-41af-91ab-2d7cd011db47;Ip=[20.83.222.105];Helo=[mail-nam-cu10-mwh.westus2.cloudapp.azure.com]

    X-MS-Exchange-CrossTenant-AuthSource: SJ5PEPF000001C8.namprd05.prod.outlook.com

    X-MS-Exchange-CrossTenant-AuthAs: Anonymous

    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Nov 2024 13:47:47.9868

    (UTC)

    X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR19MB43

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2024-11-20T19:18:23+00:00

    You got the cheap version of this SCAM. My "invoice" was for $1,147.50. I did call the number, and they wanted my name and order number. I told the person, sounded like from India, that they could look it up with the order number. When he decided, I wasn't going to give him my name, he hung up.

    I had looked at the header for the email and it was about as good a SPOOF as I have seen except that the return path was to "onmicrosoft.com."

    ImageHello community,
    I just received this email from Microsoft but i never order anything.
    Do you think is a scam ?
    Thank you !

    3 people found this answer helpful.
    0 comments