http://darkfaifm6higbb2bnyvu22gdkibp5xdn2mmqg57buy5jpgcsmqqhjyd.onion/pgp
Someone phishing Dark.fail, for example, would convince you to click a link like "the-real-dark-fail.com".
That link would forward all page loads through to the real Dark.fail, replacing all instances of "dark.fail" on the page with their fake URL in realtime, and also swapping out all Bitcoin addresses with addresses the phisher owns in order to steal your generous donations.