Yeah that's funny how I never get phishing emails from Coinkite...

looks like phishing mails from the real trezor mail servers. spf, dkim, dmarc=pass means it's verified that they are send from their own servers.