One way to spot a fhilshing site is to use an
incorrect password for your account. If it's a
legit site, it should complain. If it's a fake,
it won't know that the password is wrong. *Unless*
the site is trying that password right then and there
at the legit site.... SO better not use this method.