And if you don't squat some domains phishing could be a bit easier than otherwise.