I don't think either of us are advocating outright DOS attacks against the spammer/phisher. I'm also unsure as to why these were modded down. Even if everyone on the list simply manually provided one fake set of credentials, the noise added to the phisher's database might be sufficient to make the endevour useless.

Right now I'm guessing that most of the hits he gets are legit from fooled users. If we were somehow able to break the model by making 99.9% of all of the info gathered worthless, they might stop altogether. In any case it would provide some cover for the people who were fooled and supplied legit creds to have a million or so bogus ones surrounding them.

Yeah, but don't they already do that?