Sites like Xploitz typically operate by creating fake login pages—a method known as phishing.