Are you referring to the site that is not really myetherwallet.com but ending with something else?
Yes, I saw one ending with .com.im but there are also targeted attacks in the associated alt coin slack channels. One attack vector was posting ICO details prematurely and investors sending money without checking. These Ethereum addresses also held other alts including Veri so they all get stolen.