Every image and all the CSS files are on Twitter’s servers. They can’t stop the phishers, but they could make their job more difficult, but they don’t? Why?