WHOIS registration and expiry dates are the strongest signal
A domain registered last week and a domain registered in 2009 are different propositions entirely. Every whois lookup reports both dates, and for assessing an unfamiliar sender the creation date does more work than any other field.
Newly registered domains are disproportionately used for phishing, so our free WHOIS domain lookup returning a creation date measured in days is worth pausing on.