Thankfully this is only proof-of-concept at this point, but one of the ways you could tell that you were at a phishing site was by examining the URL. But if you load this page in mobile Chrome (basically, your Android phone browser), you’ll see a URL bar for a different site. This is why proper web content filtering is needed to block access to bad sites that masquerade as good ones.