A Mastodon user received a phishing message impersonating the Mastodon service but sent to their self-hosted GoToSocial account, revealing sloppy targeting by the attacker. The phishing account was already suspended by the time of posting. This is a legitimate security alert — phishing campaigns targeting Fediverse users have been active, and the user's documentation helps community members identify similar attempts.