It's probably obvious to most, but... I just got a fairly plausible looking phishing email pretending that my gcc.gnu.org password was about to expire. The link it asked me to click on was a giveaway that the mail came from a criminal, but we know that these red flags can be overlooked.
So just a note in case others are being scammed as well.
paul
