The researchers noted that, while many phishing and fake shipment tracking scams rely on cheap, disposable and lightly regulated domains to operate quickly and anonymously (such as [.]xyz, [.]help, [.