I've received the following suspicious mail in my Gmail inbox, about my password being exposed:
As you can see, it comes from gaia.bounces.google.com and is signed by accounts.google.com. But there are two weird things about it:
It is written in Portuguese. I live in Spain (but near the border with Portugal, just in case that's relevant) and usually receive Google mail in spanish.
The mentioned account is a @hotmail one I use as backup account, not the main Gmail one. It's been listed on haveibeenpwned.com time ago but I changed all my passwords a few months ago when I started using a password manager.
I cannot see any problem with the signature, and the links on the mail seem legit. I've checked the certificate on the linked website and read this.
Is this legit? Does Google warn about other non-Google accounts?