I mean they should flag \*.com.thing where thing is anything other than a valid country top-level domain like au. It's not perfect but it would make this type

I mean they should flag \*.com.thing where thing is anything other than a valid country top-level domain like au. It's not perfect but it would make this type of phish a lot harder.