For decades, the humble domain name has served as the digital front door for businesses worldwide. But that front door is now under siege. A sweeping new analysis reveals that domain squatting — the practice of registering internet domains that closely mimic legitimate brand names — has escalated to unprecedented levels, threatening corporate reputations, siphoning revenue, and exposing millions of consumers to fraud, phishing, and malware.
The findings, published by cybersecurity researchers, paint a stark picture of an industry grappling with a threat that has grown far more sophisticated than the early days of opportunistic domain grabbing. What was once a nuisance has metastured into a full-blown enterprise risk, one that demands boardroom attention and coordinated legal, technical, and strategic responses.
A Massive Surge in Malicious Domain Registrations
According to a detailed report covered by TechRadar, researchers at cybersecurity firm Akamai have uncovered a staggering volume of newly registered domains designed to impersonate well-known brands. The research analyzed more than 80,000 newly registered domains and found that a significant portion were explicitly crafted to deceive consumers and exploit brand trust. These domains employ a range of techniques — from typosquatting (registering common misspellings of brand names) to combosquatting (appending legitimate-sounding words like “login,” “support,” or “secure” to brand names) — all designed to lure unsuspecting users into handing over credentials, financial information, or downloading malicious payloads.
The scale of the problem is what distinguishes this moment from previous waves of domain abuse. Akamai’s research found that attackers are not simply registering one or two lookalike domains per brand — they are registering dozens, sometimes hundreds, creating sprawling networks of fraudulent sites that can be rotated in and out of use to evade detection and takedown efforts. The sheer volume overwhelms traditional brand protection mechanisms and makes manual enforcement virtually impossible.
Why the Threat Has Evolved Beyond Simple Typosquatting
The techniques deployed by modern domain squatters have grown considerably more refined. Early cybersquatting was relatively crude: register “goggle.com” and hope someone mistyped “google.com.” Today’s adversaries are far more strategic. Combosquatting, in particular, has emerged as the dominant tactic. Rather than relying on user error alone, combosquatting domains look intentionally constructed — “brand-support.com,” “brand-login-secure.com,” or “brand-verification.net” — lending them an air of legitimacy that can fool even security-conscious users.
Akamai’s researchers noted that combosquatting domains are especially dangerous because they often pass cursory visual inspection. An employee receiving an email with a link to “companyname-hr-portal.com” may not think twice before clicking, particularly if the email is well-crafted and contextually appropriate. This makes combosquatting a potent weapon in spear-phishing campaigns targeting corporate employees, supply chain partners, and high-value individuals. As TechRadar reported, the research highlights how these domains are frequently weaponized within hours of registration, giving defenders almost no lead time to respond.
The Financial and Reputational Toll on Global Enterprises
The consequences of domain squatting extend well beyond the immediate phishing or malware incident. For major brands, every fraudulent domain represents a potential erosion of consumer trust. When a customer falls victim to a scam perpetrated through a lookalike domain, the brand itself often bears the reputational cost — even though it had no involvement. Customer support teams are flooded with complaints, legal departments scramble to issue takedown requests, and marketing teams are forced to invest in consumer education campaigns to warn against fraudulent sites.
The financial arithmetic is equally grim. The cost of monitoring for infringing domains, pursuing legal action under the Uniform Domain-Name Dispute-Resolution Policy (UDRP), and coordinating with registrars and hosting providers to take down malicious sites can run into millions of dollars annually for large enterprises. And the process is Sisyphean: for every domain successfully taken down, several more can be registered within minutes at minimal cost. Domain registration fees remain trivially low — often under $10 — meaning the economic barrier to entry for attackers is essentially nonexistent, while the cost of defense is orders of magnitude higher.
The Role of New Top-Level Domains in Amplifying the Problem
One factor that has significantly amplified the domain squatting threat is the proliferation of new generic top-level domains (gTLDs). The expansion of the domain name system beyond traditional extensions like .com, .net, and .org to include hundreds of new options — .shop, .online, .tech, .support, .cloud, and many more — has dramatically expanded the attack surface. Each new gTLD provides fresh opportunities for squatters to register brand-adjacent domains that may not yet be on a company’s radar.
Security researchers have repeatedly warned that the gTLD expansion, while intended to foster innovation and competition in the domain space, has had the unintended consequence of creating a vast new playground for abuse. Many of the newer gTLDs have less stringent registration requirements and lower prices, making them attractive to bad actors. A brand that diligently monitors .com and .net registrations may be blindsided by a phishing campaign launched from a .support or .help domain that perfectly mimics its identity. The challenge for brand protection teams is compounded by the sheer number of TLDs now in existence — over 1,500 — making comprehensive monitoring a logistical and financial challenge of the first order.
Artificial Intelligence: Both Weapon and Shield in the Domain Wars
The rise of artificial intelligence has introduced a new dynamic to the domain squatting arms race. On the offensive side, threat actors are leveraging AI tools to generate vast lists of plausible lookalike domains at scale, automate the registration process, and rapidly deploy convincing phishing pages complete with brand-accurate logos, color schemes, and copy. Generative AI has made it trivially easy to produce phishing landing pages that are nearly indistinguishable from legitimate corporate websites, dramatically increasing the success rate of domain-based attacks.
On the defensive side, however, AI is also being deployed by cybersecurity firms and brand protection services to detect and flag suspicious domain registrations in near real-time. Machine learning models can analyze newly registered domains against known brand lexicons, identify patterns consistent with squatting behavior, and prioritize the highest-risk domains for rapid investigation and takedown. Akamai’s own research leveraged advanced analytics to sift through the massive volume of new registrations and identify those most likely to be malicious. The race between offensive and defensive AI capabilities is likely to define the next chapter of the domain squatting battle.
Legal Frameworks Struggle to Keep Pace With the Threat
The legal tools available to combat domain squatting, while not insignificant, are struggling to keep pace with the scale and speed of the problem. The UDRP, administered by the World Intellectual Property Organization (WIPO), provides a mechanism for trademark holders to challenge infringing domain registrations. The Anticybersquatting Consumer Protection Act (ACPA) in the United States offers additional legal recourse. But these processes are inherently reactive and time-consuming. A UDRP complaint can take weeks to resolve — an eternity in the context of a phishing campaign that may be active for only hours or days before the attacker moves on to a fresh domain.
Industry observers have called for more proactive measures, including stricter verification requirements at the point of domain registration, enhanced cooperation between registrars and law enforcement, and the development of automated takedown mechanisms that can operate at machine speed. Some have advocated for a “know your customer” regime for domain registrations, analogous to the requirements imposed on financial institutions. While such measures raise legitimate concerns about privacy and free expression, the growing scale of domain-based abuse is forcing a reexamination of the balance between openness and security in the domain name system.
What Forward-Thinking Organizations Are Doing Now
Leading enterprises are not waiting for regulatory reform. The most proactive organizations have adopted multi-layered domain monitoring strategies that combine automated scanning of new domain registrations, integration with threat intelligence feeds, and rapid-response protocols for initiating takedowns. Some companies are defensively registering large portfolios of domains that could plausibly be used to impersonate their brands — a costly but sometimes necessary tactic.
Employee training remains a critical line of defense. Even the most sophisticated technical controls can be circumvented if an employee clicks a link to a convincing lookalike domain. Regular phishing simulations, clear reporting channels for suspicious communications, and a culture of security awareness are all essential components of an effective defense. The Akamai research underscores that the domain squatting threat is not merely a technical problem — it is a human problem, and addressing it requires a holistic approach that spans technology, policy, legal strategy, and organizational culture.
As the digital economy continues to grow and more commerce, communication, and critical infrastructure moves online, the domain name system will remain a high-value target for adversaries. The brands that survive and thrive will be those that treat domain integrity not as an afterthought, but as a core element of their security posture — deserving of the same rigor and investment as any other critical asset.
WebProNews is an iEntry Publication