Following an Ethereum phishing scam down the rabbit hole