This isn't sufficient, as it highlights the sub-domain, which is the main trick scammers are using. For exmaple: http://google.com.gmail.inbox.totallynotgoogle.

This isn't sufficient, as it highlights the sub-domain, which is the main trick scammers are using. For exmaple: http://google.com.gmail.inbox.totallynotgoogle.com http://google.com.gmail.inbox.totallynotgoogle.com