The referrer might also give the phishers away, although maybe you could combine...

		wmf on Oct 23, 2008 \| parent \| context \| favorite \| on: Bank of America SiteKey man-in-the-middle attack d... The referrer might also give the phishers away, although maybe you could combine the MITM with clickjacking so that the referrer would be correct.