A user-friendly PhaaS tool beats standard methods for detecting phishing attacks by live-proxying legitimate login sites.