One has to be constantly on alert.
Got my “free” security training recently. Got caught by a similar-looking domain (where a single character was off). That was my first security “fail” in the last two decades.
Well, what can I say? Don’t work when it’s time for a break ;)