For the OP (et al), Websites are the new scam. They are copied and put up on "hosting" sites and LOOK very real. Connection to them is often sent in an email.
A few months back (as an example) my mom received and very real 'looking' email from McAfee stating that they had mistakenly 'refunded' and incorrect amount of credit to her account and could she please return it. They had also, somehow, made a transfer appear on her banking site and altered the 'memo code' to look like it was them to her (but was actually from her to her - she had 2 accounts). She then received a phone call to "follow up" and "assist" her in how to make the correction.
Long story short - had she not been stopped she would have lost $40,000
I have since closed both those accounts and changed her bank as well as canceling McAfee and set up 2 step verification for EVERYTHING except direct ATM withdraws and even those have a a daily limit. (she's 83 and I call her "Happy Fingers". She's also been grounded from using the computer ???? )