As previously mentioned, attackers could also use other technique of creating phishing landing pages via custom 404 Not Found pages, from self-hosted ones to Amazon CloudFront, Microsoft Azure, ...