I've noticed that spear phishing attacks have become quite a bit more sophisticated lately. This is a good example of it, but I've gotten emails supposedly from Stripe, my bank (not a common one that would suggest a mass attack), my credit card company, all quite convincing. At first glance I was fooled, but thankfully figured them out before giving away my accounts. I've since become more vigilant of course.

In none of these cases did my email provider figure out that the sender was malicious.