The rest of the day went by without any issues, and John was able to access the company's portal without any problems. But the question still lingered in his mind - was that email a clever phishing attempt, or a legitimate password reset link?