we all have different people we help with upvotes on steemit and when they send us links, we just upvote without checking if the link is actually the right one.
the screenshot below is a very good example. as you can see, my steemit profile loaded well and you will think its just a normal steemit website, but the "T" was replaced with "L" making it "sleemit".
please avoid logging into your steemit with your password, alwasy use posting key . just add your password only when you want to transfer and dont save the password on your browser when you are done transferring.