This would contain misleading content, prompting the user to supply sensitive information to the attacker.