Most "upd" mirror sites strip away HTTPS security. This means any data you send (usernames, passwords, search queries) is transmitted in plain text. If you log into a fake "Free Account" prompt, you are handing your credentials to hackers.