Equifax dug itself a bigger hole by directing its customers to a fake website to check if they've been hacked.