Hover over the email address, you'll see it's a scam/phishing attempt. I can see it's from blockchain.lnfo, it's L not i.
These are the same with paypal phishing attempts. Be careful with these.
To prevent this from happening, just setup 2FA so they can not login even though they have your password. Sesion hijacking would be possible though, but still a little risk.