I need some verification about unusual login emails

I hit report as well as it looked legit at first glance. Not sure what that means what info did they get out of me?

If anybody knows what could happen by accidentally replying to that scam let me know.

I clicked the report the user button and it made a mail with the text "Report the user" and i sent it is this a problem? If so what should i do?

Watch out for those emails

Some are phishy

Always check https//account.microsoft.com

For login activity or your authenticator app

I also received this email today hahaha,
I think these type of email will always fall in spam, because they dont have any authentication of sender email address. You can find a lot of information of the sender by clicking with the right button at the email > View > View message source. I think this part is the sender, is next your mail address. On Microsoft emails it will be the ip address of the microsoft server who sended the information, and on this fake email it was the scammer data center ip address

""" Fake email received today

Received: from cuknbated.co.uk (89.144.43.209) by CO1NAM11FT016.mail.protection.outlook.com (10.13.175.141) with Microsoft SMTP Server id 15.20.5791.20 via Frontend Transport; Tue, 1 Nov 2022 22:51:58 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:CA3E7A7394B9A90F9FA7FD04B0A4027C8FCEA165AEFEFF9DDCC8FE0099D64AA0;UpperCasedChecksum:BC1C88E2B33EB6EA4F259253339CB3D8FE63C674FBD4706B031B1A15C226B7CB;SizeAsReceived:329;Count:10 From: Microsoft account team <*** Die E-Mail-Adresse wurde aus Datenschutzgründen entfernt. ***> Subject: Microsoft account unusual sign-in activity

To: *** Die E-Mail-Adresse wurde aus Datenschutzgründen entfernt. ***

"""

Real microsoft email, signed by microsoft:

"""

Received: from MW1PEPF00002D64 (51.141.168.191) by MW2NAM12FT075.mail.protection.outlook.com (10.13.181.223) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5791.20 via Frontend Transport; Wed, 2 Nov 2022 02:56:45 +0000 DKIM-Signature: v=1; a=rsa-sha256; d=microsoft.com; s=s1024;

"""

I also taked the datacenter's name from the ip who sended me the fake email at this ip verification site, and found 7 bad reviews after searching it at google https://www.google.com/search?q=GHOSTnet+GmbH

Take a look at the screenshot, looks realy convincing

Hi and thanks for reaching Microsoft Xbox gamer's community. My name is Josef.
I'm an Independent Advisor and a Microsoft Xbox user like you.

Hope you're doing great today Catboy357

Can you share again the email address?
Or even better, share an screenshot where we can see the sender and the email itself (don't forget to conceal your personal information)