Rods with laser beams: understanding browser fingerprinting on phishing pages