Voted #1 forum on the web.
If they weren't legit people would know they could decompile the client and if there password was stolen I'm sure they'd complain on their forums.