As I see, lack of security in domains management accounts is a great issue that contributes to spread the Angler Exploit Kit, therefore a good practice could be develop a temporal token enabled system in order to allow the domain management in a more secure way. Excelent information by the way.