Hackers are increasingly abusing the highly decentralized web domain name registration system to buy internet addresses they can use in phishing attacks.