Your trademark is one of your most valuable assets. A .brand TLD takes it from a legal registration to a living, breathing piece of your digital infrastructure.


ICANN’s 2026 New gTLD application window opened on April 30, 2026 and will close August 12, 2026. For most trademark owners, this is not an abstract policy moment — it is a time-sensitive strategic decision. Once that window closes, the next opportunity to apply may not arrive for another decade.

If your organization holds a registered trademark, a .brand top-level domain is worth serious consideration. Not because it is a novelty, but because owning the right side of the dot delivers two things that matter most to brand owners: complete control over how your brand appears online, and a structural defense against threats you’re probably already managing today.

This article is for trademark owners, brand managers, and corporate counsel who want to understand the why before evaluating the how.


What exactly is a .brand TLD?

A generic top-level domain, or gTLD, is the “right of the dot” portion of a domain name — the .com, .org, or .net you’re already familiar with. A .brand TLD is simply one where the string to the right of the dot is your brand. Think .apple, .nike, and .ibm.

When a company is awarded a .brand through ICANN’s program, it becomes the Registry Operator for that top-level domain. Every domain under it — store.yourbrand, support.yourbrand, careers.yourbrand — is issued exclusively under your control. No one else can register in it without your permission. No registrar can offer it to the public. It is, categorically, yours.

In the 2012 round, major corporations including Apple, Amazon, Google, and hundreds of others made exactly this move. With the 2026 round now approaching, trademark owners who haven’t yet acted have a clear, defined window to do so.


Marketability: your brand becomes the internet address

There is something fundamentally different about a URL that ends in your brand name rather than .com.

It is unmistakably you. A URL like shop.yourbrand or login.yourbrand carries a level of brand coherence that yourbrand-shop.com or yourbrand-login.net simply cannot match. There is no ambiguity, no qualifier, no generic extension standing between your name and your customer.

Every domain is a brand impression. Under a .brand architecture, every URL you publish — in advertising, on packaging, in email signatures, on social media — reinforces your brand identity rather than diluting it. You’re not renting space in a shared namespace. You own the namespace.

It opens up a clean, intuitive URL strategy. Brands operating in multiple markets, languages, or product lines often end up with a tangle of country-code domains, subdirectories, and hyphenated variants. A .brand TLD provides a logical, scalable structure: usa.yourbrand, fr.yourbrand, enterprise.yourbrand. Clean, readable, and on-brand every time.

It differentiates you from competitors who haven’t made the move. In a world where digital presence is table stakes, the brands that own their TLD signal a level of commitment and permanence that others cannot claim. It’s a statement to customers, partners, and investors: we are here to stay, and we own our corner of the internet.


Security: closing the attack surface that currently has your name on it

For many trademark owners, the security argument alone is sufficient to justify the investment.

Phishing and brand impersonation are endemic. Attackers routinely register domains like yourbrand-login.com, secure-yourbrand.net, or yourbrand.xyz to deceive your customers. These domains are trivially inexpensive to register, difficult to take down through legal channels, and effective at eroding customer trust. Brand impersonation through bad acting domains remains one of the primary vectors for consumer fraud globally.

A .brand TLD fundamentally changes the threat model. When your customers know that legitimate communications always come from a .yourbrand address — not yourbrand.com, not yourbrand.net, but simply .yourbrand — they have a clear signal for what is and isn’t authentic. Attackers cannot register in your TLD. They cannot impersonate you at the registry level. That is a structural security control that no defensive domain registration program, no matter how comprehensive, can fully replicate.

Internal namespaces become private by design. Many organizations today run internal services — HR portals, VPN endpoints, developer tools — on internal hostnames that bleed into public DNS. A private .brand TLD lets you establish a controlled, authenticated namespace for internal use that is completely segregated from the public internet, with policies and security controls you define.

It complements your existing brand protection stack. If your organization already invests in defensive domain registrations, brand monitoring, domain blocking or takedown services (as many 101domain corporate clients do), a .brand TLD doesn’t replace those efforts — it elevates them. You are no longer playing catch-up with bad actors registering lookalike domains. You’re operating from a position where the most valuable namespace, the one bearing your exact trademark, is simply unavailable to anyone else.


Proven in practice: what a decade of .brand ownership looks like in the real world

The security case is no longer theoretical. At ICANN 86 in Seville, operators from Fox, Amazon, and Sky described a decade of living inside their own namespaces, and the use cases that emerged were more practical than most applicants anticipate.

Phishing prevention with an enforceable standard. Fox mandates .fox links in all internal employee communications, giving its security team a clear signal for what’s legitimate and what isn’t.

Avoiding premium domain costs. When a Fox business unit requested a coveted 3-letter .com at $5,000+/year, the team pointed them to the .fox equivalent, free and available immediately.

Internal infrastructure and APIs. Amazon’s engineering and security teams have embraced brand TLDs for internal services and API endpoints. This use case wasn’t in the original plan but emerged organically from stakeholder conversations.

Branded URL shorteners. Fox uses go.fox on broadcasts. Zara runs go.zara across all social media. Every shortened link is immediately verifiable as authentic, unlike bit.ly or similar third-party services.

Authenticated email for the C-suite. Sky issues .sky email addresses to senior executives. When an email ends in .sky, recipients know it can only have come from Sky — a meaningful defense against executive impersonation.

There’s a forward-looking dimension to this that goes beyond phishing prevention. As AI agents increasingly navigate the web autonomously, there isn’t always a human in the loop evaluating whether a domain is trustworthy. An authenticated, controlled namespace becomes a trust signal not just to your customers but to the systems acting on their behalf. The value of that signal will only grow as AI accelerates on both sides of the threat equation.


Addressing the common objections

“Isn’t .com good enough?”

For general web presence, yes. But “good enough” is not the same as optimal, and it is certainly not the same as secure. You do not own .com. Verisign does. You lease space in it, and anyone else can lease adjacent space that looks like yours. A .brand TLD is categorically different — it is infrastructure you own, not infrastructure you borrow.

“Our customers won’t understand a non-.com address.”

This concern was reasonable in 2010. Today, consumers interact daily with .ai, .io, .co, .app, .shop, and scores of other extensions without friction. Adoption of the 2012-era new gTLDs now exceeds 43 million active registrations. Consumer familiarity with non-.com addresses has grown steadily with that adoption.

“The cost is too high.”

The minimum investment for a .brand TLD — inclusive of ICANN’s $227,000 application fee, consulting, legal, and first-year operation — runs between $350,000 and $500,000, with annual operating costs starting around $60,000 – $75,000 thereafter. That is a real commitment. But for any organization with a trademark that generates meaningful revenue, the calculus deserves a serious look: What does brand impersonation cost you annually in fraud, customer confusion, and reputation management? What is the lifetime value of owning a pristine, exclusive namespace versus indefinitely defending against squatters and infringers in a shared one?

“We’ll wait for the next round.”

The 2012 round was followed by a 13-year gap before the 2026 program opened. There is no guarantee the next round arrives before 2035 or later. Organizations that waited in 2012 are, in many cases, watching their competitors operate on .brand addresses today while they remain on generic extensions. The window this year is specific: April 30 through August 12, 2026. After that, it closes.


Who should be applying

Not every trademark owner is the right candidate for a .brand TLD. The investment and operational commitment is real, and applicants need to demonstrate long-term financial capacity to ICANN as part of the evaluation process.

But you should be seriously evaluating an application if:

  • Your trademark is globally recognized or is a significant commercial asset in your industry
  • You actively spend on defensive domain registrations or brand protection services
  • You operate across multiple product lines, geographies, or customer segments where a clean URL structure would provide commercial value
  • You’ve experienced brand impersonation, phishing attacks, or domain fraud that has impacted your customers or your reputation
  • You’re planning a long-term digital infrastructure investment and want the namespace under that infrastructure to be entirely under your control

If any of those describe your organization, the 2026 program deserves your attention before the August 12 application window closes.


Next steps

The application process is complex — ICANN’s evaluation covers financial capacity, technical readiness, legal entity structure, and more. It requires a cross-functional team and an experienced partner who has navigated the program before.

101domain is a full-service partner for new gTLD applicants. We support trademark owners through every stage: application preparation, Registry Service Provider selection, ongoing compliance, and operations — so you can focus on your brand while we handle the infrastructure.

Contact us today to start your evaluation.