fake-email

Seems to me the answer to the problem is simple: ISPs should be proxying known phishing sites. I’d make it an “opt-out” toggle, as only people know know what they’re doing would be crazy enough to actually want to view a known phishing site. That’s the key: being able to identify a phishing attack. I suppose this has proabably been done before, but I haven’t seen a widespread deployment of such a service (which should be free, IMHO).

Read more on Flushing Phishing…