[tiborsaas]

For phishing to work you need a similar domain if you want to maximize the conned people. Copying the path from the attacked website is the easiest part.

I can even argue that if you take away the path from the URL, then it's actually easier to spot a phishing website since all you see is the domain if you don't hover over the address bar.