Unmasking Phishing: Strategies for identifying 0ktapus domains and beyond