In the meantime, we received notification that our site was not using the latest version of WordPress, from Google nonetheless.
At first my phishing alarm bells went off louder than a hurricane siren and I deleted the email. Then, out of curiosity as to where the phisher was trying to send me, I went back to the email. Low and behold, the email is legit. Google announced such email notifictions back in 2009.
But, seriously, take a look at the actual email format:
Is it just me, or does that scream “phishing email, kill it, nuke it, blast it to smithereens”?
C’mon Google! While I appreciate that someone not on the ball would benefit from such notifications, I’m sure a lot of these get deleted as suspicious. How about some formatting? Heck, even a line-break would be nice here or there.