Brazil's .com.br: 33.7 Million Domains, 147 Categories, and the Internet's Most Opinionated Namespace

In 1991, Brazil's entire Internet connection was a copper wire inside an undersea telephone cable, running from a university lab in Sao Paulo to a particle physics facility in Batavia, Illinois. Every packet Brazil sent or received — every email, every file transfer, every DNS query — traveled through Fermilab. This arrangement lasted three years. The country that today has 185 million Internet users and the sixth-largest ccTLD on Earth spent the first years of its online existence routing through an American physics experiment.

That origin story matters because it set the tone for everything that followed. Brazil did not inherit its domain system from a pre-existing academic network the way Britain inherited .co.uk from JANET. Brazil built its system from scratch — and it built something no other country has attempted. Where Germany offers one extension (.de), France offers one (.fr), and the Netherlands offers one (.nl), Brazil offers 147. Not seven. Not seventeen. One hundred and forty-seven second-level categories, organized into eleven groups, covering everything from commercial enterprises (.com.br) to licensed dentists (.odo.br) to the city of Florianopolis (.floripa.br) to Central Bank-authorized financial institutions (.b.br, DNSSEC mandatory).

Every domain requires a government-issued identity number. Every professional domain requires verification from the relevant licensing body. Direct registration under .br is not available to the public — and unlike the UK, Australia, Japan, and New Zealand, Brazil has never opened it. This is not an oversight. It is a deliberate choice, maintained for three decades, by a governance structure that no other country has replicated.

We parsed 33,705,174 domains in the .br namespace from the DomainsProject dataset, cross-referenced with Registro.br registry statistics (October 2025), NIC.br governance reports, CGI.br multi-stakeholder documentation, and DataReportal's 2025-2026 Brazil digital statistics.

The headline: .com.br holds 97.3% of all domains in the .br namespace — 32.8 million out of 33.7 million. Brazil built the most elaborate domain categorization system of any country on Earth, requires government identity verification for every registration, deliberately refused to open direct .br registration, and is the only major namespace among the top ccTLDs that is still growing — up from 1 million domains in 2006 to 5.5 million registry registrations in 2025, a 10% gain since 2021 while most comparable namespaces have stagnated or contracted.

The Data

DomainsProject continuously crawls and indexes domains across every delegated TLD in the IANA root zone. For this analysis, we parsed the full .br dataset file to count every domain by its second-level extension.

Our 33.7 million figure includes subdomains observed during DNS resolution, which is why it exceeds Registro.br's official count of 5.5 million. The 6.1x multiplier — one of the highest for any major ccTLD — reflects the depth of Brazil's hosting infrastructure, ISP reverse-DNS entries, and platform-generated subdomains. A single ISP, Velox (Oi Telecom), contributes 7.8 million reverse-DNS entries under veloxzone.com.br alone — 23.7% of all .com.br entries in our dataset.

The Scorecard: 147 Categories, One Winner

.br Namespace Breakdown (DomainsProject Dataset)

Brazil has 147 domain categories. One of them holds 97.3% of everything. The remaining 146 categories collectively account for 895,457 domains — 2.66% of the namespace. The 97.3% figure is dataset-level, inflated by infrastructure subdomains (particularly 7.8 million Velox ISP reverse-DNS entries); at the registry level, .com.br holds 93% of all .br registrations — still an overwhelming concentration. Brazil's .com.br is the most extreme monoculture of any major ccTLD on Earth.

This is not a failure of the categorization system. It is the system working exactly as intended. .com.br is the default — the domain Brazilian consumers type instinctively, the domain that captures 75.7% of all domain registrations within Brazil (compared to 52% for .uk in the UK). The other 146 categories serve specialized functions: credentialed professionals, government agencies, educational institutions, city identities. They were never meant to compete with .com.br. They were meant to classify the Brazilian Internet.

Registro.br Official Numbers (October 2025)

The 6.1x dataset-to-registry ratio tells a story about infrastructure. For every registered .com.br domain, our dataset observes an average of 5.4 resolvable hostnames — subdomains from hosting platforms, CDNs, SaaS products, and ISP infrastructure. The largest single contributor is Velox (Oi Telecom's residential broadband service), whose reverse-DNS entries under veloxzone.com.br account for 7.8 million of the 32.8 million .com.br entries. Blogspot.com.br adds another 381,000. Softonic.com.br adds 207,000. Strip away the infrastructure and platform subdomains, and the namespace resolves roughly 6.1 million unique second-level domains — closely tracking Registro.br's official 5.5 million.

The Fermilab Connection: How Brazil Got Online

The UK inherited .co.uk from JANET, an academic network that predated the global DNS. Brazil inherited nothing. It built its Internet from scratch — and the story starts with particle physics.

In 1988, the National Scientific Computing Laboratory (LNCC) in Rio de Janeiro established Brazil's first international network connection to the University of Maryland via Bitnet — a store-and-forward network for academic email, not the Internet. That same year, FAPESP (the Sao Paulo Research Foundation) joined Bitnet. But the physicists wanted more.

In 1989, researchers Carlos Escobar and Philippe Gouffon at the University of Sao Paulo's Physics Institute needed real-time data from particle accelerator experiments at Fermilab in Batavia, Illinois. They arranged a TCP/IP connection — running through a copper wire inside an existing undersea telephone cable — from FAPESP's network center in Sao Paulo to Fermilab's computing infrastructure. Alberto Gomide, an engineer at FAPESP's Academic Network (Ansp), specified the technical requirements. Joseph Moussa installed Multinet software on FAPESP's Digital VAX computer. In 1991, the first Internet packets were exchanged.

On April 18, 1989, Jon Postel at IANA delegated the .br country-code domain to FAPESP. The administrative contact was Demi Getschko — a professor of electronic engineering at PUC-SP who would go on to lead NIC.br and be inducted into the Internet Hall of Fame in 2014.

Every byte of Brazil's Internet traffic flowed through Fermilab until 1994. In 1992, the RNP (National Teaching and Research Network) deployed a national backbone connecting 11 capital cities — but the international gateway remained a physics lab in the American Midwest. Commercial Internet service did not begin in Brazil until 1994. When it did, the country had 851 registered .br domains. By December 1996, automation had brought that to 7,500. By 2006, one million. By September 2022, five million.

The Fermilab origin explains something about Brazil's approach to domain governance. The country's Internet was not grafted onto an existing telecommunications monopoly or an academic naming hierarchy. It was incubated inside a research institution — FAPESP — whose mission was scientific rigor, not commercial efficiency. When CGI.br was created in 1995 to govern the Internet, it inherited that institutional DNA: structured, deliberate, and categorized.

The 147-Category System: Nothing Like It Anywhere

No other country on Earth has built a domain system like Brazil's. The 147 second-level categories span eleven groups, and the most remarkable are the ones that exist nowhere else.

Professional Credential Domains (Globally Unique)

To register .med.br, you must hold a valid CRM (Regional Medical Council) license. To register .adv.br, you must be a member of the OAB (Brazilian Bar Association). These are not vanity domains — they are credential-gated namespaces tied to Brazil's professional licensing infrastructure. No other country has attempted anything comparable. The UK has .me.uk (309 domains in our dataset). Germany has .de. Brazil has a domain extension for licensed dentists.

In practice, adoption is minimal — our dataset shows 195 .med.br entries, 267 .adv.br entries, and 316 .eng.br entries. But the existence of these categories reveals CGI.br's philosophy: the domain system should describe the Internet, not just address it. A .med.br domain tells you something a .com.br domain cannot — that the registrant holds a medical license verified by a federal council.

City Domains

Brazil has over 40 city-level domain extensions — geographic identifiers for municipalities from Sao Paulo (.sampa.br) to Boa Vista (.boavista.br, population 419,000). In our dataset, these city domains show roughly 100-176 entries each. Like the professional domains, they are barely used. Like the professional domains, they exist because CGI.br believes the namespace should reflect the structure of Brazilian society.

This is the philosophical divide. Germany, the Netherlands, and France built flat namespaces — register anything.de, anything.nl, anything.fr. The UK tried to add a flat layer (.uk) on top of its structured one (.co.uk) and created a split that satisfied no one. Brazil committed fully to structure. It categorized the namespace by commerce, profession, institution, geography, and function — and then left .com.br as the unrestricted default for everyone else.

Restricted and Institutional Domains

Brazil is one of the few countries where banks operate under a mandatory DNSSEC domain. The .b.br extension requires Central Bank of Brazil authorization and enforces DNSSEC signing — a security measure that most ccTLDs do not mandate for any category. Government entities register under .gov.br at no cost, and state-level government sites operate under geographic subdomains: .sp.gov.br for Sao Paulo, .rs.gov.br for Rio Grande do Sul, .ba.gov.br for Bahia.

The Governance Model: What Working Looks Like

The UK's Nominet survived a member revolt in 2021 after its CEO's pay doubled while charitable spending was slashed 65%. Germany's DENIC is a non-profit cooperative — stable, but with governance limited to registrar members. Brazil built something different: a multi-stakeholder committee with democratic elections.

CGI.br: The 21-Member Internet Parliament

CGI.br (Comite Gestor da Internet no Brasil) was created on May 31, 1995 by an interministerial ordinance, and restructured by Presidential Decree 4,829 in September 2003. Its 21 members represent every constituency in Brazilian society:

Non-government constituencies — corporate, civil society, academic, and expert — hold 12 of 21 seats. Government holds 9. Civil society seats have been democratically elected since July 2004 — the only major ccTLD governance body in the world where the public votes on who governs the domain namespace.

CGI.br vs. Nominet vs. DENIC

NIC.br's self-funding model is the structural innovation. R$40 per domain multiplied by 5.5 million registrations generates approximately R$220 million per year (~$41 million USD). This revenue does not go to shareholders — it funds Brazil's Internet infrastructure: CERT.br (the national computer security response team), CETIC.br (ICT statistics), IX.br (Internet exchange points connecting Brazilian networks), and Registro.br itself. Nominet's GBP 56.4 million in annual revenue funds a private company. NIC.br's $41 million funds a public mission.

Demi Getschko has shaped Brazil's domain system since its inception — administrative contact for .br at its 1989 IANA delegation, founding member of CGI.br in 1995, and NIC.br's CEO since the organization's creation in 2005. He was inducted into the Internet Hall of Fame in 2014. His involvement spans 37 years and three institutional roles — the entire history of Brazil's Internet. Compare this to Nominet, which has cycled through CEOs, a governance crisis, and a member revolt in the same period. Institutional continuity matters.

The Identity Requirement: CPF, CNPJ, and What It Means

Every .br domain is tied to a government-issued identity number. Individuals must provide a CPF (Cadastro de Pessoas Fisicas) — an 11-digit taxpayer ID issued by Brazil's Federal Revenue Service. Companies must provide a CNPJ (Cadastro Nacional da Pessoa Juridica) — a 14-digit business registry number.

This is not optional. There is no anonymous registration. There is no privacy proxy that removes the identity link. Every domain is traceable to a verified person or entity.

The Impact on Abuse

Identity verification creates accountability but does not eliminate abuse. .com.br appeared in the APWG's top 9 phishing TLDs in Q4 2021. Banking and tax-themed phishing exploiting .com.br subdomains is rising — over 1,300 unique .com.br subdomains have been observed in phishing campaigns. CPF fraud is significant in Brazil, with 80% of identity fraud attempts occurring at the verification stage. An underground market exists for fraudulent CPFs.

But .br does not appear on the "most dangerous ccTLD" lists alongside .tk, .ga, .cf, and .ml — the free-registration Freenom domains that at their peak accounted for the majority of ccTLD phishing worldwide. Identity verification raises the cost of abuse. It does not make abuse impossible. The distinction matters: Brazil's approach is a barrier, not a wall.

The .bet.br Mandate: Domains as Regulatory Infrastructure

In January 2025, Brazil demonstrated the most aggressive use of a domain namespace as a regulatory tool that any country has attempted.

The Ministry of Finance's Instruction 11/2024 requires every licensed gambling operator in Brazil to use a .bet.br domain. Not recommended. Required. All 66 companies that applied for iGaming licenses must migrate to .bet.br and comply with Registro.br's standard requirements — including a valid CNPJ. By March 2025, over 12,500 illegal gambling websites that did not hold .bet.br domains had been blocked by court order.

Only 14 of the 66 applicants met all criteria for permanent licenses. The rest operate under provisional authorization while they comply. The message is structural: if you want to operate legally in Brazil's online gambling market, your domain extension is not a choice — it is a regulatory classification.

No other country has done this at scale. The UK's Gambling Commission regulates operators through licensing, not domain policy. Australia's ACMA blocks illegal gambling sites, but does not mandate a specific domain extension. Brazil's approach is uniquely Brazilian: use the 147-category system not just to describe the Internet, but to regulate it.

The Domain Density Gap: Room to Grow or a Different Internet

Brazil has one ccTLD domain for every 38.7 people. The Netherlands has one for every 2.8.

Domain Density Comparison

Brazil's domain density is 6-14x lower than comparable economies. One interpretation: the market has enormous room for growth. With 185 million Internet users, Brazilian domain penetration at German levels would produce 41 million .br registrations — 7.4x the current count. At Dutch levels, 66 million.

The other interpretation is more structural. Brazil has the world's fifth-largest Internet population, a $64 billion e-commerce market, and 86.9% Internet penetration. But 98.4% of Brazilian Internet users access the web via mobile — the highest mobile-first ratio of any major economy. Mobile-first users consume platforms, not domains. They use Mercado Livre, not mercadolivre.com.br. They find businesses through Instagram, not Google. They message through WhatsApp, not email.

Brazil's low domain density may not be a gap to fill — it may be the future other countries are heading toward. As mobile platforms replace the open web, the relationship between Internet usage and domain registration decouples. Brazil arrived at the mobile-first Internet before most Western economies. Its domain density reflects that reality.

The Growing Namespace

Despite the low density, Brazil's .br namespace is growing — and that makes it an outlier among the world's largest ccTLDs.

Growth Trajectory

Growth Comparison Among Top ccTLDs

The UK's .uk namespace has lost 3.3 million registrations since its 2021 peak. Brazil's .br has gained roughly 500,000 over the same period. The contrast is not coincidental. Nominet raised wholesale prices 56% since 2016 and the market responded by leaving. NIC.br raised prices once in 20 years (R$30 to R$40 in 2020) and the market continued growing. DENIC held prices steady at EUR 2.20 and the market plateaued. Pricing stability correlates with namespace stability.

The Marco Civil: Internet Rights as Law

On April 23, 2014, President Dilma Rousseff signed the Marco Civil da Internet into law — at NETmundial, a 1,200-participant global Internet governance conference hosted in Sao Paulo. The legislation was the world's first comprehensive digital bill of rights, codifying net neutrality, freedom of expression, and privacy protections into federal law — four years before the EU's GDPR took effect.

The Marco Civil emerged from CGI.br's own governance principles. In 2009, CGI.br published its "10 Principles for Internet Governance and Use in Brazil," which became the framework for the legislation. NETmundial itself was convened partly in response to revelations of NSA mass surveillance — including espionage against President Rousseff personally.

Brazil's Internet governance infrastructure — CGI.br, NIC.br, the Marco Civil — is inseparable from its domain system. The same multi-stakeholder model that governs .br also shaped national Internet policy. The same registration fees that fund Registro.br also fund CERT.br's national security response team and CETIC.br's statistical surveys of Brazilian Internet usage. The domain namespace is not just a naming system. It is the financial and institutional backbone of Brazil's Internet governance.

What's at Stake

The .br data reveals a model that contradicts conventional wisdom about domain system design:

• Brazil built the most elaborate domain categorization system on Earth — and it works. 147 categories, mandatory identity verification, no direct .br registration, and the namespace is still growing at 4-5% annually. The conventional wisdom that simpler domain systems produce better outcomes does not hold. Brazil's structured approach produces higher domestic market share (75.7% vs 52% for .uk), pricing stability, and institutional continuity.

• The .com.br monoculture is extreme but intentional. 97.3% concentration in a single category looks like a design failure from the outside. From the inside, it is the system working as designed: .com.br is the unrestricted default, and everything else serves a specialized, credentialed, or institutional purpose. The 146 other categories exist to classify, not to compete.

• Identity verification raises the floor for domain abuse but does not eliminate it. The CPF/CNPJ requirement means every .br domain is traceable to a verified person or entity — a structural advantage over namespaces like .tk (free, no verification) and .co.uk (no verification). But CPF fraud is real, and .com.br phishing is rising. The identity requirement is a cost, not a cure.

• Brazil's 1-per-38.7 domain density is the lowest among major economies — and may be the most honest. With 98.4% of users accessing via mobile and platforms like Mercado Livre, WhatsApp, and Instagram replacing the open web, Brazil's domain count reflects actual business need rather than speculative registration. European domain densities may be inflated by legacy registrations, SEO parking, and defensive registrations that serve no functional purpose.

• The self-funding model aligns incentives. NIC.br funds CERT.br, CETIC.br, IX.br, and Registro.br from registration fees — roughly $41 million per year reinvested in Brazilian Internet infrastructure. Nominet's comparable revenue (GBP 56.4 million) funds a private company that survived a governance crisis over executive compensation. The structural difference in how registration fees are used matters more than the fee amount.

• The .bet.br mandate demonstrates domains as regulatory infrastructure. Brazil is the first country to require licensed operators in an entire industry to use a specific domain category. Over 12,500 unlicensed sites have been blocked. The 147-category system is not just taxonomy — it is a regulatory tool.

What Would Help

1. Other ccTLD operators: study Brazil's multi-stakeholder model before assuming simpler governance is better. CGI.br's 21-member committee with elected civil society seats has maintained pricing stability (one increase in 20 years), institutional continuity (same leader since 1989), and a growing namespace — outcomes that eluded Nominet despite a similar non-profit mandate. The model is not easily replicated, but its principles are: democratic representation, reinvestment of registration fees, and separation between governance (CGI.br) and operations (NIC.br). Compare approaches on our .br statistics page.

2. Researchers: use the DomainsProject dataset to study infrastructure patterns under .com.br. Our 33.7 million .br entries versus Registro.br's 5.5 million registrations implies a 6.1x subdomain multiplier — the highest we have measured for any major ccTLD. Veloxzone.com.br alone contributes 7.8 million reverse-DNS entries, revealing the scale of Oi Telecom's residential broadband infrastructure. Download the full dataset to analyze ISP, hosting, and platform subdomain patterns.

3. Domain policy makers: learn from Brazil's .bet.br mandate. Using domain categories as regulatory gatekeepers — requiring licensed operators to register under a specific extension — is a novel approach to online market regulation. Its effectiveness (12,500+ illegal sites blocked) deserves study. Its limitations (enforcement depends on DNS-level blocking, which can be circumvented) also deserve scrutiny. Browse the TLD statistics dashboard for cross-country comparisons.

4. Brazilian businesses: .com.br remains the correct default. 75.7% domestic market share, 15-25% higher conversion rates versus .com for Brazilian audiences, and identity verification that signals trust. The professional domains (.adv.br, .med.br, .eng.br) are credential signals for individual practitioners. The city domains (.sampa.br, .rio.br) are identity markers. But .com.br is where the market is.

5. ICANN and global governance bodies: recognize Brazil's Internet governance infrastructure as a model. The same registration fees that fund Registro.br also fund CERT.br, CETIC.br, and IX.br. The same multi-stakeholder committee that governs domain policy also shaped the Marco Civil da Internet. This integration between domain governance and broader Internet policy is unique, effective, and underfunded relative to its scope. Explore the full country statistics page to see how governance models correlate with namespace outcomes.

This analysis was conducted using the DomainsProject dataset, which continuously indexes domains across all 1,519 active TLDs in the IANA root zone. The .br namespace breakdown was computed from the raw dataset file (33,705,174 domains). Registry-level statistics are from Registro.br (October 2025). Governance data is from CGI.br, NIC.br, and the Internet Hall of Fame (Demi Getschko profile). Internet usage data is from DataReportal (Digital 2025/2026: Brazil). Historical data is from Revista Pesquisa FAPESP ("The Internet's Early Days") and RNP. .bet.br regulatory data is from the Brazilian Ministry of Finance. Pricing comparisons use Registro.br, Nominet, DENIC, and Verisign published rates. Explore .br statistics on our TLD statistics page, view country statistics for Brazil, browse the full TLD dashboard, or access the complete dataset for your own research.