Placeholder domain used in dev docs now serves ClickFix attacks