Yeah , you are right , i have succeded to create in 2 minutes a fake page for yahoo who saves your password then is logging you on yahoo mail without any time to see what's happening