https://krebsonsecurity.com/2023/09/why-is-us-being-used-to-phish-so-many-of-us/

Whats that you say? Outsourcing domain registration and ID validation to a company who has a financial incentives in accepting registrations leads to spam domains? I'm shocked I tell you. /s/hocked