Banks, and health providers too. I love when my health insurer, say Mega Health Care for a fictitious example, decides to have a marketing page at megahealthcar

Banks, and health providers too. I love when my health insurer, say Mega Health Care for a fictitious example, decides to have a marketing page at megahealthcare.com, a patient portal at mymhc.com and a special page for covid stuff at mhccovidresponse.com . All of these have independent certs so it’s entirely possible it’s a phishing site. But it’s legit, and these companies are just encouraging bad behavior. This crap is why phishing happens.