Indeed. I got my credit card phished after buying tickets from an 'official' local museum website, it was the first result on Google. Later on I realized that all five top results were scam sites, the real one was 6th. They eventually fixed it.