They harvest username, email and passwords from users (If someone not too tech savvy uses the same email/password combination for more than one service they can access their accounts). The main function of this scam campaign is to steal "gas fees" money (no actual minting involved, looked at the code). They ask 0.15 ETH for each entry. In my case they could've got something around 6000$.
There are people that have fallen for this scam.