New gTLD abuse

How it works

The expansion of the domain name space added hundreds of new endings, many of them cheap and loosely policed. Attackers register your brand under endings you do not own, such as yourbrand.shop or yourbrand.app, and use them for phishing, fake stores, or redirects. Some TLDs see far higher abuse rates than legacy ones like .com.

Because you cannot defensively register every ending, watching the new TLD space matters.

How it relates to brand impersonation

New gTLDs widen the lookalike surface around your brand at low cost to attackers. They are a common home for the impersonating domains monitoring is meant to catch.

How nebty helps

nebty watches the full TLD space around your brand, not just .com and your home market, so abusive registrations under new endings surface for review and on-demand takedown.

Why some endings attract abuse

Not all top-level domains carry the same risk. Abuse concentrates where registration is cheap, bulk-friendly, and lightly policed, which is why several newer endings show abuse rates many times higher than .com. For an attacker the appeal is simple: a few euros buys yourbrand.shop or yourbrand.app, your customers half-expect brands to live on themed endings, and the registry may be slow to act on complaints. You cannot defensively register your brand across hundreds of endings, and trying is a poor use of budget. The realistic posture is to register the handful that match your business and home market, then monitor the rest, so when your name appears under an ending you do not own, you see it and can decide whether it warrants a takedown.