A lot were being messaged with a question about a product containing a URL that started with silkroad6. When they went there, the landing page was identical to the login screen and stated "Your login has expired for security reasons". They would then re-enter their credentials without thinking twice. That site has since been forcibly removed from the Tor network.