The .com namespace is saturated. 137M registrations, effective collision rate near 100% for dictionary terms. New gTLDs offer targeted semantic value at lower acquisition cost.
I run filtering for a 340 Gbps anycast scrubbing network. Traffic analysis shows .app and .dev domains in phishing lures rising 12% YoY, indicating mainstream trust migration. Brand recognition curves follow .co and .io patterns from 2012-2018.
Portfolio theory: uncorrelated assets. .com moves with US commercial real estate sentiment. New gTLDs decoupled.
Attack surface note: registry-level takedown response times vary. Contabo DNS filtering sees .shop and .xyz at 4-hour median suspension, .com at 18 hours. Faster enforcement reduces collateral reputation damage.