Was the site not designed to actually phish? - The site contains Equifax's heading, uses their branding, and is highly similar to the actual website - The sit

Was the site not designed to actually phish? - The site contains Equifax's heading, uses their branding, and is highly similar to the actual website - The site is hosted on a domain that is very similar to the actual website and uses Equifax's name - The site instructs users to enter PII on it under the guise of being Equifax. It could be argued that the creator of the site created this to determine whether people were being phished by it before activating the actual collection of data. Additionally, in Chrome, when I fill out the form and get the alert box, when I dismiss the alert box, two requests are made to the domain: https://securityequifax2017.com/eligibility/images/favicon-32x32.png https://securityequifax2017.com/eligibility/images/favicon-3... https://securityequifax2017.com/eligibility/images/favicon-16x16.png https://securityequifax2017.com/eligibility/images/favicon-1... If an onSubmit handler is attached to the form submit that sets a cookie with this information before showing the alert, then the phished details are transmitted to securityequifax2017.com. Lawyers will C&D this extremely hard, a very reasonable case can be made that this is impersonation, and a phishing site with malicious intent. NB: I DO NOT BELIEVE THAT THIS IS THE CREATOR'S INTENT. So do not jump at me thinking that I do believe that. I'm just saying that it could be very reasonably and successfully argued, and that nuance and intent could do very little to spurn allegations of impersonation or actual phishing.