Of course, you have to find a balance 😂, but the target of these attacks is people with little knowledge, to begin with, they do not access by https, that should make them suspicious. I also commit some spelling mistakes deliberately, apart from the fact that the domain is not the same!