Today I received an email claiming that my OneDrive account is going to be deleted as it has been unused for the past two years. This is probably true.
The email urges me to visit OneDrive to reactivate my account before a date roughly 3 months from now so I may keep my account. Seems reasonable.
What gives me pause:
- The email does not use my (fake) name associated with the account, or any name at all.
- The links go to onedrive.com, whereas onedrive is typically accessed from onedrive.live.com
- The only place I can find that says the above site is correct is wikipedia
- The whois information isn't overly helpful (to my untrained eye), but is quite different from the live.com whois information
- Email is from email@example.com, seems within reason, but a little odd
- 3 of the 4 links in the email go to the same page, just with a different UUID attached to the end
Reasons why I'm not so sure:
- Microsoft has sent me legit emails from other domains before. Clearly not understanding the phishing risk this causes for their users.
- Microsoft hasn't picked it up as a scam/junk (not many get through)
- Thunderbird hasn't marked it either (normally gives me tons of false positives)
- It is a domain one would expect Microsoft to have snapped up
- Go to the legit website and log in, if it's a scam then no harm, if it's not then problem solved.
Unfortunately, I'm the tech geek for quite a few family members that don't understand online scams so well. If it is indeed a scam, I need to let them know so they can recognize it.
Can someone who is a little more sleuthy figure this one out for me and my naive relatives?