Cybercriminals are becoming a major force in the domain-name market, driving an estimated one-fifth of new gTLD registrations in 2025 and exposing how commercial incentives, weak enforcement, and scale continue to fuel online abuse.