Flip side about a lot of people thinking @bsky38.com is a scam to get passwords is that it is nice to know many people are on their toes about it. The other side is Atmosphere/PDS Account OAuth is a much more foreign concept and does not seem to work when rubber meets the road, at least for us :/
Getting lots of questions about login. When you login to bsky38.com you're really logging into your Bluesky account on their webpage. We never see your password. Bluesky can let other websites use it as authentication, similar to "Login with Google." The screen found here bsky.social/account