I got a spam email at work today that had a link to go to "microsoft.com" that was actually password dot land, and I'm really sad that's a malware site and not a masto instance.