Which domain names should a company register, and how should a defensive portfolio be built?

Work from the trademark filings and the actual markets rather than casting a net across a list of extensions.

A four-layer structure works well.

Core layer. The main brand in the major generic top-level domains and in the country-code domains of the principal markets of operation — .cn for China, with Chinese-character domains also to be considered. This layer should correspond to the countries where the trademark is registered.

Variant layer. Common misspellings, hyphenated and unhyphenated forms, singular and plural forms, and product line names closely associated with the main brand. These block imitation and can be redirected to the main site.

Monitoring layer. Names that are not registered but are kept under watch, to be dealt with through a dispute proceeding if they are squatted and the use amounts to infringement. For a company with a limited budget, monitoring gives better value than registering without limit.

Consistency layer. Domain names, social media account names, e-commerce store names, and mini-program and official account names all kept the same, so that the brand reads as one identifiable system.

On budget: the core layer must be held without fail, with long-term renewal and auto-renewal in place; the variant layer should be prioritized by infringement risk; and the monitoring layer should cover as wide a field as possible.