That URL. Was looking reasonably professional until that point (apart from the spelling mistakes). At least put a decent typosquat in there though. Half arsed attempt. 6/10.
After countless hours of research and opinions from fellow colleagues, I have come to the conclusion that’s this was a legitimate email and gave them my log in and credit card info. What a relief.