"phishing" of this type is unfortunately a common problem on Tor because the design of hidden services makes it very difficult for a user to validate where they

"phishing" of this type is unfortunately a common problem on Tor because the design of hidden services makes it very difficult for a user to validate where they're connecting. It's totally possible that this situation is not malicious but it sure is sketchy and is similar to a lot of malicious fronting that you can find on Tor for popular services. I consider this a major defect of the hidden service design but there's only so much motivation to address it.