You'd be surprised. There is a Texas law firm whose domain is my domain name + "law". Guess who receives a significant portion of their "confidential" messages and inquiries?