I was recently IM'd from a buddy of mine via Yahoo! Instant Messenger. He signed in, sent me a link to a GeoCities page, and immediately signed off. As our conversations usually center around beer drinking and work, I was immediately suspicious. After navigating to the link, I was prompted to enter my Yahoo! username and password. Upon closer inspection, the form would email the username and password to [havinfunfun@gmail.com|mailto:havinfunfun@gmail.com]. Further poking around found that other geocities pages with similar urls had the same type of attack. I emailed Yahoo!, The Google Team, and the hosted script provider and provied them details about this dickhead's attack. So, here's a bone to all you spammers out there: Feel free to spam the shit out of [havinfunfun@gmail.com|mailto:havinfunfun@gmail.com].