We all have the ability to use our domains. Alleged impersonators don't stand a chance to verify themselves at youtube@youtube.com or tesala@tesla.com. In short, If companies will adopt nostr, they will use their own business domains.
I'd say let them be and take their money :)