one time i made a sub-domain of the gif site i used to have like www.stereokiller.com.pahcfiles.com and sent wild steve a PM as if it was from this website and it made him “login” there, which was just copy/pasted html from pahc that looked prettty similar. all it did was write his password into a file then redirected to actual pahc. i checked the next day, had the password, then deleted his account.
not much different than what this post is.