I gotta say, this is creative. I've just gotten a couple of Google Docs notifications that I (along with a string of other random gmail addresses) was mentioned in a comment on a document. The content of the comment is an obvious spam/malware kind of link, like "http://clk.com@ql.xz?st89" (that has been both munged and altered in plaintext, just for illustration purposes, please don't try to reconstruct it). Like hell I'm going to click it - but Google's process for reporting abuse wants me to open the document, and report it from there, which, uh, no thanks?