i agree... fishing is always a viable trick, but you think people would learn not to fall for that. apparently, the name of the html page was fakelogin.html, that's how someone noticed it and reported it.