Q: What makes it "a phishing domain"?
A: It's when it's actually used for phishing, not when we glance at it and it just looks, well, "bad".