The difference would be the URL as many people already know that Bitcointalk.org is not hosted in any other sites. Of course I know there are lazy people who are so weak to check their URL displayed before they hit the entire kyc. What mostly happened is that when browser is that used to that particular website usually login to you would see that they can target you through there to launch a fake site that would look like the regular site which you do login to, the difference will be that they will ask to login back and if you aren't careful immediately you login then your account is gone or cloned.