Browser warnings flagged the site for suspected phishing after attackers pushed a fake TOS message designed to trick users.