The is the main reason why if you ever get a password reset email you ALWAYS go to the site directly and NEVER through the link provided in the email.