Fraudulent domains are remaining active for longer