Microsoft e-mail

dencal · 08 Mar 2023

Received an e-mail purportedly from Microsoft claiming I need to Update my Dev version of Insider.
Not having ever been on that version aroused my suspicions.
Is this a genuine e-mail from Microsoft?

bro67 · 08 Mar 2023

Look at the header.

dencal · 09 Mar 2023

bro67 said:

Look at the header.

If you Google even M$ suggest it can be faked.
Am always wary clicking on links in e-mails.
Updated using Settings revealed was already on latest version.

Bastet · 09 Mar 2023

I would expect any genuine email from MS to show microsoft.com & not @e-mail.microsoft.com.
If you hover your mouse over the link what’s the url?

dencal · 10 Mar 2023

Bastet said:

I would expect any genuine email from MS to show microsoft.com & not @e-mail.microsoft.com.
If you hover your mouse over the link what’s the url?

@e-mail.microsoft.com.
Which is why I posted it as suspicious.

NMI · 10 Mar 2023

Bastet said:

I would expect any genuine email from MS to show microsoft.com & not @e-mail.microsoft.com.

Sub-domains are hardly uncommon:

Subdomains are also used by organizations that wish to assign a unique name to a particular department, function, or service related to the organization.

Subdomain - Wikipedia

Ben Myers · 10 Mar 2023

I think it is legitimate. I am an Insider all my Insider emails come from e-mail.microsoft.com. Microsoft is making changes to the Insider program, apparently with a new channel called Canary. In fact, they are already rolling it out on Windows 11.

Windows 11 Insider Canary Build 25314.1000 (rs_prerelease) - March 8 | Page 3 | Windows 11 Forum

Ben

Bastet · 10 Mar 2023

When you hover your mouse cursor over the ‘update’ banner does it show a genuine MS link?
I know you state the header can be faked but you can analyse the header information here:
Message Header Analyzer if it is faked then I wonder if this would confirm or deny this.