metaspam

I have to admire the audaciousness of this one:

On Fri, Aug 14, 2015 12:18 PM GMT+1, we noticed an attempt to sign in to your earthlink account from an unrecognized device in Nigeria west Africa. If this was you, you're all set!

If you haven't recently signed in from anunrecognized device and believe someone may have accessed your account, please visit this link [redacted, but it doesn't even say it's Earthlink] to update your account recovery information.

Thanks for taking these additional steps to keep your account safe.

Not only did the link name display give it away, so did the non-Earthlink sending address and, most glaringly, the "To:" list, which was an alphabetically-consecutive chunk of 30 e-mails from a long list of Earthlink addresses.