The website mypsswrdcom (or similar variations) is designed to look like a legitimate password management or security tool but is actually a spoofed site .