I have an alleged AARP email in my AOL Spam folder. It is borderline, using two domains in email and web references, but not lying about the properly registered host IP/name. When I get attack Spam, I usually try to send it to the target oprganization, so their Security people can follow up, either making their promotional email less like that of a
phishing hacker, or working to shut down ...