> The single best signal for identifying a phishing domain is the domain registration date
I guess the authors have never heard of domain washing?
Because IME a majority of domains from serious and large-scale spammers are not new - they are abandoned domains, where the spammer is counting on that domain’s prior reputation to bypass any filtering.
I guess the authors have never heard of domain washing?
Because IME a majority of domains from serious and large-scale spammers are not new - they are abandoned domains, where the spammer is counting on that domain’s prior reputation to bypass any filtering.