Bottom line: Defensive domain registrations and takedowns are reactive and too slow—structural control over your own namespace requires new governance approaches such as dotBRAND TLDs.
AI-assisted phishing attacks scale faster than traditional countermeasures such as monitoring and UDRP proceedings. CISOs must expand their defensive strategy to structurally protect their brand at the domain level.
According to the ENISA Threat Landscape Report 2025, over 80 percent of identified phishing emails used AI assistance. Phishing was the most common initial access vector and caused 60 percent of all observed intrusions in the EU. Abuse takes place almost exclusively at the domain level: fake websites, phishing portals, and fraudulent shops use domains with brand names or minimal spelling variants (cybersquatting, typosquatting). The World Intellectual Property Organization (WIPO) recorded a total of 6,168 UDRP cases in 2024—the second-highest volume since the procedure was introduced in 1999.
Classical defensive strategies—defensive domain registrations, monitoring, UDRP proceedings, and takedowns—reach their limits at this attack density. The search space is nearly unlimited: several hundred generic TLDs and over 300 country-code domains combined with spelling variants and phonetic similarities create a space for abuse that no organization can fully cover. UDRP proceedings standardly require six weeks of processing—time that phishing campaigns use to reach thousands of users. At the same time, the attacker side scales faster: PhaaS platforms deliver ready-made brand imitations for low fees, and the barrier to entry for attackers continues to decline.
The core problem with reactive strategies is that organizations control their own domains but not the space around them. Every domain containing or imitating a brand name and not registered by the brand itself is a potential attack point. What is structurally missing is control over the brand name itself as a namespace.
A dotBRAND Top-Level Domain—a generic TLD delegated by ICANN that belongs exclusively to the brand holder and is operated by it—can close this gap. Under a dedicated brand TLD (for example .example instead of example.com), no third party can register domains; cybersquatting within your own namespace is technically excluded. Users recognize: everything under the brand TLD is authorized, everything else is not.
A dotBRAND, however, serves as one component of a comprehensive security stack. Lookalike domains under other TLDs remain possible and still require active monitoring and enforcement. The added value lies in the structural closure of your own namespace as a governance building block against brand impersonation and phishing at the domain level.
Source: www.it-daily.net · Published June 16, 2026
Lumi AI News—AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.1.