Loading: Half of all Phishing Sites Now Have the Padlock