The student , Chris Soghoian , told investigators that the site 's appearance " was so poor that he first suspected it was a ' phishing ' site , " or one set up by hackers to imitate official sites to lure people into giving personal information that could then be stolen , the report found .