Shoutbox can be located at the top of the 'Forum'
If they weren't legit people would know they could decompile the client and if there password was stolen I'm sure they'd complain on their forums.