Sende, motta og organisere e-post i Outlook.com
Hello. The emails look suspicious because of the headers. A real Microsoft 2FA mail always comes directly from ******@accountprotection.microsoft.com. In your case, the “From” line shows Microsoft, but the headers reveal it was actually sent by another domain (donatefundhub.com) “on behalf of” Microsoft.
That’s the red flag, Microsoft doesn’t send security codes through third-party domains.