It's crazy that the official mastodon.social staff account on here looks exactly like a phishing account with no domain verification whatsoever lol
@jonah The fact that that account got the name @ staff lends it some possible credibility (seems like an admin-assigned username), but that assumption of course doesn't really matter security-wise.
