If someone host html content which looks like facebook or twitter or similar popular platforms login page. And they get the login credentials by sending the post data to some other details.
Google may find the website as deceptive and shows dangerous warning.