It is very unfortunate for the bounty manager who still does not understand this risk,
so we must really feel worried about this, don't let our guard down, because phishing sites will always exist.
Some Bounty managers still do not hide email addresses which is awful. Last week I received phising mails containing cloned Kucoin exchange link, asking me to login to claim KCS rewards for a Kucoin campaign I didn't join. What if he ignorantly used the scam cloned site to login, his account would have been cleared. It's very important to hide mails on spreadsheet or at least hide a part of it. Security is very vital and hence should not be taken for granted.