@nixCraft lol, i also think its not a good phishing campaign if just one person clicked

@nixCraft I know I shouldn't...but maybe I need too

Back in the day when I was a Unix/Linux sysadmin guy for a medium sized enterprise, I sent a similar email asking people not to ever share their SSH or API keys with anyone, even if they claimed to be from the IT group. Guess what? Many replied and shared those keys. These were all developers. That day, I realized people have no chance. Now we see people install an app on their phone because someone claims to be calling from a bank or government and they lose their life savings. It is messed up