Unverified domain extensions are primary vectors for drive-by downloads, which install software packages automatically without explicit user authorization.