> Even if EV certs are not any better than DV at preventing phishing, they're better for investigating phishing. Except general phishing sites won't use them,

> Even if EV certs are not any better than DV at preventing phishing, they're better for investigating phishing. Except general phishing sites won't use them, which means they won't do anything for investigating phishing. There's no need for phishing sites to use them since users don't notice. The only real scenario where they'd be used is in a spearfishing scenario where it's worth the risk in order to snag a high-value target, especially because it's a lot less likely that your misleading EV cert will be captured by investigators (once you're done with that one target, take down the site before anyone can look into it).