2. Blank their page with JavaScript. While it's legal to redirect the traffic to your site (it's YOUR JavaScript and there are no Terms for its use), you'll probably mislead people and make them think that you are the phishing site. Not worth it, in my opinion.
1. Send a DMCA notice [https://news.ycombinator.com/item?id=5367936].
2. Blank their page with JavaScript. While it's legal to redirect the traffic to your site (it's YOUR JavaScript and there are no Terms for its use), you'll probably mislead people and make them think that you are the phishing site. Not worth it, in my opinion.