Some approaches to detecting it exist, like this "deceptive domain" score from Netcraft: https://www.netcraft.com/anti-phishing/deceptive-domain-scor... I assume, though, they are just doing some fancy string matching with a few other features (character lookalikes, xlate to punycode, etc). I imagine that both the "false positive" and "false negative" rates are pretty bad.
Personally, I don't see how it makes sense for a domain registrar, CA, web hosting provider, etc, to have to figure this out, but...
- Legitscript, some kind of consortium meant to block internet sales of pharma products named/shamed a domain registrar https://www.legitscript.com/blog/2012/12/internet-bs-domain-...
- Markmonitor, some service sold to big brands to protect their brands, also does some name/shame type reports: http://www.circleid.com/posts/best_worst_phishing_domain_reg...
Some approaches to detecting it exist, like this "deceptive domain" score from Netcraft: https://www.netcraft.com/anti-phishing/deceptive-domain-scor... I assume, though, they are just doing some fancy string matching with a few other features (character lookalikes, xlate to punycode, etc). I imagine that both the "false positive" and "false negative" rates are pretty bad.