There is also .om for Oman. But I don't see how either of these domains are "risky", at least not anywhere as bad as subdomains of the pattern [actual].com.[imp

There is also .om for Oman. But I don't see how either of these domains are "risky", at least not anywhere as bad as subdomains of the pattern [actual].com.[impersonator].com https://en.wikipedia.org/wiki/.om https://en.wikipedia.org/wiki/.om