this is the address it came from but all the links seemed to work:
This is the rest of the header:
Created on: 14 October 2016 at 21:40 (Delivered after 16 seconds)
Subject: Microsoft account unusual sign-in activity SPF: PASS with IP xx.xx.xxx.xxx Learn more DMARC: PASS Learn more....
Any ideas? Someone on a forum trying to crack my password?