I got the email too. It comes from stackoverflow.email, and all the links go to stackoverflow.email, without HTTPS. And look at this: ```$ curl https://stackoverflow.email/ -I HTTP/2 302 cache-control: private content-type: text/html; charset=utf-8 location: http://email.stackoverflow.com/ ``` And when trying to access by HTTPS: ```This server could not prove that it is sg-links.stackoverflow.email; its security certificate is from *.sendgrid.net. This may be caused by a misconfiguration or an attacker intercepting your connection. ``` This looks like phishing.