Quoted from altan:2) They are misrepresenting themselves as you / your company
I've noticed that the malicious site does something random every time you go to it. Some times it redirects to other sites. But sometimes it does try to mimic a pinball website. Here is a screenshot from my iPhone of one of the times it came up looking kind of like the real site which might trick someone.