Google totally incompetent, could prevent a class of phishing with simple regex