It looks like a phish but isn’t This is really bad for so many reasons. It certainly doesn’t help their security. And yes, it’s completely legitimate. Alex Eckelberry