Reminds me of the malicious site for MultiPar, which the (since deprecated) official forums said linked to altered binaries, yet due to the convincing domain name fooled even various regular users linking to it on forums like Reddit.