About this question
I've received the following suspicious mail in my Gmail inbox, about my password being exposed. It comes from gaia.bounces.google.com and is signed by accounts.google.com. But there are two things that seem weird to me:
It is written in Portuguese. I live in Spain (but near the border with Portugal, just in case that's relevant) and usually receive Google mail in Spanish. The mentioned account is a @hotmail one I use as a backup account, not the main Gmail one that I use. It's been listed on haveibeenpwned.com a while ago but I changed all my passwords a few months ago when I started using a password manager.
I cannot see any problem with the signature, and the links on the mail seem legit. I've checked the certificate on the linked website and read this. Is this gaia.bounces.google.com legit? Does Google warn about other non-Google accounts?
