>For a phishing site they don't bother because it's not necessary. It also wouldn't scale, domains get blacklisted within minutes or hours, getting an EV cert

>For a phishing site they don't bother because it's not necessary. It also wouldn't scale, domains get blacklisted within minutes or hours, getting an EV cert takes longer than that.