How Fraudulent Domains ‘Hide in Plain Sight’