I have Thunderbird flush 'em.

I got phished the other day. The email said that I had to verify my Key Bank account. Problem is, I don't have such a thing, either personally or through work.

After whois-ing the IPs and doing other such stuff, I traced it to a company in an industrial park in Cairo, Egypt. Using a back-door approach, I visited the URL given in the email. Sure did LOOK like a Key Bank site. A reverse lookup on the 800 number, however, never did say that it was assigned -- just kept coming up empy on three different look-up sites.

So I reported the whole thing to Key Bank.

But -- I did keep some printouts, which I've forwarded to the local police department's Crime Watch. They're free to put it into their monthly newletter as a cautionary tale for other folks who might not know as much about it as I do.