[damncabbage]

> they should at least give 12 - 24 hours for > a startup to react and investigate

By which time the phisher has already done the damage and moved on.