I agree with you in premise, but if you read the post, the website users were redirected to was a phishing site: https://wpdotjoshdotcom.files.wordpress.com/2019/05/snag-003...