What is the target in a phishing attack?

A perimeter firewall is a network device that protects the network edge but is not the direct target for credential harvesting in a phishing attack.

An IPS (Intrusion Prevention System) is a security device designed to detect and block malicious activity, not the target of a phishing attack.

A web server can host malicious content for a phishing attack, but it is typically a tool or platform used *by* the attacker, not the direct target from which credentials are stolen.

In a phishing attack, the endpoint (such as a workstation, laptop, or mobile phone) is the target because it is where the end-user interacts with the malicious email or website, and where credentials or sensitive information are intended to be harvested.