From there, a verification mail is generated, which the fake page would ask for. When you enter this code, the attacker will ...