The phishing phenotype.

Among combosquat lookalikes (<brand>+<keyword>), the keywords that appear most often. Each row is a keyword, its cross-brand reuse, and which brands it most frequently attaches to. High brand_count = a generic phishing template (e.g. -support) used against many brands; low brand_count = brand-specific.