How is a phishing vulnerability based off a singular site? Phishing are just tricks How is a phishing vulnerability based off a singular site? Phishing are just tricks to get the user to give you their credentials in belief you are the site in some way (staff, admin, etc.). It's basically social engineering, how exactly is yours specific to this site? There's nothing you can really do to prevent a phishing attack against your site via defensive programming.to get the user to give you their credentials in belief you are the site in some way (staff, admin, etc.). It's basically social engineering, how exactly is yours specific to this site? There's nothing you can really do to prevent a phishing attack against your site via defensive programming.