More targeted solutions: Flag websites that look like phishing URLs - websites that contain domain names of popular websites in their subdomains or other parts

More targeted solutions: Flag websites that look like phishing URLs - websites that contain domain names of popular websites in their subdomains or other parts of the URI. But initially, don't do anything. it could be harmless. AMP has domain names in the URI, right? But, as soon as the user starts typing into a text-entry field (especially a password one), you bring a pop-up warning them that this might be a phishing site.