[adanto6840]

Surely they're doing some verification to ensure that either the redirect lands on the advertised TLD, or alternatively that you're at least "in control" of the TLD you're advertising as (similar to GAnalytics verification -- via meta tag, DNS txt entry, etc)?

[utopcell]

Google does.

[ocdtrekkie]

Doesn't seem to work much better than whatever solution Bing uses, see https://news.ycombinator.com/item?id=18317051

Though that was 2017, and Google might've improved their protections since then.