Yeah you’d think a company could forward from their own domain or something, but I get a ton of legit emails from non company domains because I guess they’re to lazy/too much effort? Anyway, I just try not to click any email links.