I don't get it, does phishing attacks works till now? I thought they are useless nowadays as because everyone knows about them. And I think this user is just wasting his time by sending others a phishing link there is no way that someone will click on that link and fill it with their real username and password. Come on it's 2018 bro no one is stupid enough to do that. It's good that you report to admin he should be perm ban for trying such stupid stuffs.
You definitely would be surprised knowing how much phishing attacks are successfull 
. Yes, it's 2018 but still a lot of people are naive and careless (or stupid) about their's data safety in internet. And threads like this could help in decreasing people's ignorance and increase awareness.