Sort:  

I reported the phishing to heroku. Not much more sadly.