3% of phishing sites use device-specific redirection, showing benign content on desktops while targeting mobile devices with phishing payloads.