> The single best signal for identifying a phishing domain is the domain registration date

I guess the authors have never heard of domain washing?

Because IME a majority of domains from serious and large-scale spammers are not new - they are abandoned domains, where the spammer is counting on that domain’s prior reputation to bypass any filtering.