The Netherlands' .nl: 27.8 Million Domains, the Internet's First Country Code, and the Quiet Backbone of Everything

On 1 May 1986, a system administrator named Piet Beertema registered cwi.nl — a domain for the Centrum Wiskunde & Informatica, a mathematics institute in Amsterdam. It was the first active country-code domain registration outside the United States. Beertema had applied to Jon Postel at IANA for the .nl delegation just days earlier. He would go on to manage the entire .nl namespace single-handedly from his room at CWI for the next ten years, handling the first 10,000 registrations by himself. In 1999, Queen Beatrix awarded him Knight of the Order of the Netherlands Lion.

A reader named f00dit asked us to break down the Netherlands' .nl domain. The request seemed straightforward — another European ccTLD analysis. It turned into something else entirely. The Netherlands is not just a country that has a lot of domains. It is the country that built the infrastructure the rest of the Internet runs on — and our dataset proves it in ways the registry statistics never could.

The numbers at the registry level tell one story: 6.06 million .nl domains, the third-largest ccTLD in Europe, the highest ccTLD density per capita among countries with more than 5 million residents (1 per 3.0 people). Solid but not remarkable. Our dataset tells a different one: 27.8 million resolvable hostnames under .nl, and 28.6% of them are ISP reverse-DNS entries from three providers — Ziggo, Chello, and XS4ALL. The Netherlands did not just register domains. It gave every broadband customer a resolvable hostname. The dataset is a census of Dutch Internet infrastructure itself.

We parsed 27,803,330 domains in the .nl namespace from the DomainsProject dataset, cross-referenced with SIDN registry statistics (end 2025), SIDN Labs research data, AMS-IX traffic reports, and historical sources from CWI, NLnet, and SURFnet.

The headline: the Netherlands has 18 million people and an outsized claim on the Internet's core infrastructure — the first active ccTLD (1986), the highest domain density per capita among 5M+ countries (1 per 3.0 people), the world's largest Internet exchange by member count (AMS-IX, 1,000+ members, 14 Tbps peak), the headquarters of RIPE NCC (the regional Internet registry for Europe, the Middle East, and Central Asia), the birthplace of NSD and Unbound (DNS software that powers root servers and ISPs worldwide), and a $10.5 billion data center market concentrated in Amsterdam. Our dataset captures 27.8 million .nl hostnames — 4.6x the registry count — because Dutch ISPs assigned resolvable reverse-DNS to millions of broadband connections. The namespace peaked at 6.35 million registrations in mid-2023 and has since contracted for the first time in its history, driven by declining business formation and a collapse in youth domain registration intent from 55% to under 20% in two years.

The Data

DomainsProject continuously crawls and indexes domains across every delegated TLD in the IANA root zone. For this analysis, we parsed the full .nl dataset file to understand what 27.8 million hostnames actually represent.

Our 27.8 million figure includes every resolvable hostname under .nl — subdomains, ISP reverse-DNS entries, hosting platform subdomains, and registered domains. The 4.6x multiplier between our count and SIDN's 6.06 million reflects the depth of Dutch broadband infrastructure: three ISPs alone contribute 7.96 million reverse-DNS hostnames to our dataset. This is not noise — it is the fingerprint of a country where broadband penetration reached 99% and every cable modem got a name.

The Scorecard: What 27.8 Million .nl Hostnames Actually Are

ISP Infrastructure in the Dataset

Nearly three in ten .nl entries in our dataset are ISP reverse-DNS records — hostnames automatically assigned to broadband customers by Ziggo, Chello, and XS4ALL. This is unusual at this scale. Brazil's equivalent — Velox ISP contributing 7.8 million entries under veloxzone.com.br — represents 23.7% of a single extension. The Netherlands' ISP entries are distributed across multiple providers and represent a structural feature of Dutch Internet culture: ISPs here assign individual, resolvable reverse-DNS hostnames to residential connections as a matter of routine.

Ziggo: The Dominant Infrastructure

The Ziggo entries break down into distinct network generations:

Ziggo alone accounts for more hostnames in our dataset than the entire registered domain base of France (.fr, ~4 million) or the European Union (.eu, ~3.7 million). VodafoneZiggo's hybrid fiber-coaxial network passes 7.14 million Dutch homes — roughly 90% of the country — and each connection leaves a trace in the global DNS. The 6.2 million Ziggo entries in our dataset are not websites. They are the addresses of Dutch living rooms.

XS4ALL: A Ghost in the Data

The 630,337 XS4ALL entries in our dataset are a digital tombstone. XS4ALL — "Access for All" — was shut down by its parent company KPN on 24 December 2021. The brand no longer exists. But its reverse-DNS hostnames persist: adsl.xs4all.nl (402,281 entries), ip.xs4all.nl (190,795), mobile.xs4all.nl (10,621), home.xs4all.nl (7,761), dial.xs4all.nl (3,224). These are the ghosts of a provider that was not just an ISP but a cultural institution — and the DNS has not forgotten it.

The First Active ccTLD: How the Netherlands Got .nl

The United Kingdom's .uk was delegated on 24 July 1985. But the Netherlands' .nl, delegated on 25 April 1986, was the first country-code TLD outside the US to have an actual domain name registered and actively resolving. cwi.nl — registered 1 May 1986 — is older than every other ccTLD domain outside American soil.

On 17 November 1988, at 2:28 PM, Piet Beertema connected CWI to NSFNET — making the Netherlands the first European country on the public Internet. France's INRIA followed shortly after. The connection ran through EUnet, the European Unix network whose main node operated out of CWI. From that single link in Amsterdam, much of Europe's early Internet connectivity was bootstrapped.

.nl Registration History

It took 17 years to reach the first million (1986-2003) and only 17 more to reach six million. The inflection point was June 2003, when SIDN opened .nl registration to individuals worldwide — previously, only businesses and organizations could register. Hans Kraaijenbrink, SIDN's first CEO, led the reform. He died the same year it took effect. The growth it triggered was explosive: 1 million to 6 million in 17 years.

But Beertema's contribution extends beyond the Netherlands. He developed a "DIY package" — technical instructions enabling colleagues across Europe to apply for and operate their own country-code domains. .de, .fr, .se, .fi — the ccTLDs that now represent some of the largest namespaces on Earth were bootstrapped, in part, by a system administrator in Amsterdam who had figured out the process first.

The Hacker ISP: XS4ALL and the Culture of Dutch Internet Freedom

XS4ALL was not founded by telecommunications engineers or business executives. It was founded by hackers.

In 1989, Rop Gonggrijp launched Hack-Tic — a Dutch hacker magazine inspired by Hamburg's Chaos Computer Club magazine Datenschleuder and New York's 2600. That same summer, Gonggrijp, Caroline Nevejan, and Patrice Riemens organized the Galactic Hacker Party at Paradiso, Amsterdam's legendary music venue. The event brought together hackers from across Europe and established Amsterdam as a center of hacker culture alongside Hamburg and Berlin.

In 1993, the Hack-Tic collective founded XS4ALL — "Access for All" — the sixth ISP in the Netherlands and the second to offer Internet access to individual citizens. The name was a mission statement. Internet access was a right, not a product. The founding team — Felipe Rodriquez, Rop Gonggrijp, Paul Jongsma, Cor Bosman — came from the hacker underground, not the telecom industry.

XS4ALL was sold to KPN in December 1998 but retained its identity as an independent subsidiary. It became the ISP of choice for the Netherlands' technically literate: researchers, developers, privacy advocates. The 402,281 adsl.xs4all.nl entries in our dataset are not random broadband customers. They are the addresses of a specific Dutch digital culture.

From Hacker Culture to National Policy

The hacker ethos that created XS4ALL did not stay underground. It shaped Dutch law.

The Netherlands became the first European country — and the second in the world after Chile — to enact a net neutrality law on 4 June 2012. The legislation emerged from the same digital rights culture that produced XS4ALL. This was not coincidence. When KPN announced it would kill the XS4ALL brand in January 2019, over 50,000 people signed a petition to save it — including former board members and the original founders. When the brand died on Christmas Eve 2021, a crowdfunded successor called Freedom Internet had already raised EUR 2.5 million to continue the mission.

No other country has a direct, traceable line from a hacker magazine to a commercial ISP to a national net neutrality law. The Netherlands does.

The Infrastructure Nation: Why Amsterdam Matters

The Netherlands did not just connect to the Internet early. It became the Internet's physical infrastructure for Europe.

Amsterdam's Internet Infrastructure

AMS-IX — the Amsterdam Internet Exchange — was founded in February 1994 at Science Park Amsterdam by NIKHEF, SARA, CWI, SURFnet, and NLnet. Thirty years later, it is one of the world's largest Internet exchange points: over 1,000 connected parties from around the globe, 14 Tbps peak traffic in December 2024, approximately 2.9 exabytes of traffic per month. It operates seven Internet exchanges worldwide.

NLnet Labs, founded in Amsterdam in 1999, produces DNS software that the entire Internet depends on. NSD (Name Server Daemon) is an authoritative DNS server used by multiple root server operators and ccTLD registries. Unbound is a validating, recursive DNS resolver deployed by major ISPs worldwide. OpenDNSSEC automates DNSSEC key management. Krill and Routinator secure BGP routing through RPKI. All BSD-licensed. All free. All Dutch.

RIPE NCC — the Regional Internet Registry for Europe, the Middle East, and Central Asia — has been headquartered in Amsterdam since it began operations in April 1992. Its offices are in the east wing of Amsterdam Central Station, with 175+ staff from 40+ countries. Every IP address allocation in its service region passes through Amsterdam.

The concentration is not accidental. NLnet Foundation — the organization that funded NLnet Labs — traces its roots to 1982, when it helped build EUnet, the European Unix network whose main node was at CWI. Amsterdam's position as Europe's Internet hub was established before the commercial Internet existed, and it compounded from there: the exchange drew the data centers, the data centers drew the cloud providers, and the cloud providers drove Amsterdam's data center market to $10.5 billion.

The Freenom Irony

One other organization headquartered in Amsterdam deserves mention: Freenom — the company that operated .tk, .cf, .ga, .gq, and .ml, the five most-abused domain extensions on Earth. Joost Zuurbier's OpenTLD BV, which offered free domain registrations that at their peak accounted for 14% of all global phishing, operated from the same city as RIPE NCC, AMS-IX, NLnet Labs, and SIDN.

Amsterdam simultaneously hosted the organizations that built the Internet's security infrastructure and the company that did more to undermine it than any other single entity. Meta's $500 million lawsuit, filed in 2022, led to Freenom halting registrations in March 2023 and settling in February 2024. But the irony remains: the world's most notorious domain abuse operation was Dutch.

SIDN: The Model Registry

SIDN (Stichting Internet Domeinregistratie Nederland) was co-founded by Piet Beertema on 31 January 1996 — the point at which managing .nl from a single room at CWI was no longer tenable. Headquartered in Arnhem with approximately 110 employees, SIDN manages .nl through 1,058 active registrars.

SIDN vs. DENIC vs. Nominet

SIDN's Registrar Scorecard is the most effective incentive program any ccTLD has deployed. Rather than mandating technical standards, SIDN offers registrars pricing discounts for adopting DNSSEC, IPv6, DANE/STARTTLS, security.txt, and maintaining high contact data validity. The result: approximately 60% of .nl domains are DNSSEC-signed — among the highest adoption rates globally, comparable only to the Czech Republic (.cz), Norway (.no), and Sweden (.se). The program requires a minimum 10% DNSSEC adoption rate to qualify for any incentives at all.

SIDN Fund, established in May 2014 with EUR 5 million in startup capital, has funded over 400 projects focused on cybersecurity, data autonomy, disinformation, and digital inclusion. Projects must have impact on Dutch society. Notable investments include CO2.js (Green Web Foundation's digital carbon footprint tool), the e Foundation's deGoogled smartphones, and educational tools for combating online polarization. Nominet had a similar vehicle — the Nominet Trust, which distributed over GBP 44 million — before abandoning it in January 2018 during the governance crisis that led to the 2021 board revolt.

The 2023 Restructuring

In January 2023, SIDN restructured from a pure foundation (Stichting) into a foundation-plus-BV (private limited company) structure. The foundation retains the .nl delegation and serves as sole shareholder of SIDN Groep BV, which owns SIDN BV (operations), SIDN Business BV, and SIDN Deelnemingen BV.

The rationale was institutional risk management: separating operations from the delegation so that claims against the operating company cannot threaten .nl itself. This was prescient — because in 2024, SIDN walked into its first major controversy.

The AWS Sovereignty Crisis

In January 2024, SIDN announced plans to migrate part of .nl registry operations to Amazon Web Services. The response was immediate and political.

Dutch Parliament raised formal questions. The Ministry of Economic Affairs investigated risks to "digital open strategic autonomy." A GreenLeft-Labour motion, supported by PVV and VVD, called on the government to negotiate a return of infrastructure to the Netherlands. CTO Loek Bakker argued that no mature European cloud alternative existed. Critics argued that placing a national domain registry — the infrastructure that makes every .nl website resolvable — under the jurisdiction of an American corporation was an unacceptable sovereignty risk.

In January 2025, the Dutch government reluctantly approved the migration despite acknowledging "significant national security risks." By March 2025, sustained parliamentary pressure halted the migration entirely, demanding renewed consultations with Dutch cloud providers.

The irony is sharp: the country that hosts RIPE NCC, AMS-IX, a $10.5 billion data center market, and the world's most sophisticated Internet exchange considered outsourcing its own domain registry to Amazon. The episode revealed a tension that even the most Internet-sophisticated nations face: technical pragmatism versus digital sovereignty. SIDN built the argument on operational efficiency. Parliament built the counter-argument on national security. Parliament won.

The First Contraction: What AI Is Doing to Domain Demand

After four decades of growth — from cwi.nl in 1986 to 6.35 million domains in mid-2023 — the .nl namespace is shrinking.

.nl Registration Trend

2024 marked the first time in the history of .nl that the namespace experienced sustained contraction. In 2025, cancellations exceeded new registrations by approximately 54,000 domains. The decline is modest — 1.92% — but it is structural, not cyclical.

SIDN's own analysis identifies multiple drivers:

• Business formation is declining: Dutch business closures rose 11% in 2024 while startup creation fell 8%. Fewer businesses means fewer domains.
• AI is replacing websites: SIDN reports that AI tools — particularly ChatGPT — are reducing demand for simple websites. Businesses that would have registered a domain and built a basic site are instead using AI chatbots, social media profiles, and platform storefronts.
• Youth have stopped registering: The share of young Dutch people who intend to register a domain name dropped from 55% in autumn 2023 to under 20% in autumn 2025. In two years, the next generation of potential registrants largely decided they do not need a domain.

Contraction in Context

The UK's contraction is institutional — driven by a governance crisis, 56% price increases, and a fragmented namespace. The Netherlands' contraction is structural — driven by a shift in how people and businesses use the Internet. The UK's domain base is eroding because Nominet raised prices and lost trust. The Netherlands' domain base is eroding because a generation is deciding that domains are optional.

This makes .nl the canary in the coal mine. The Netherlands has 99% Internet penetration, the highest ccTLD density per capita among 5M+ countries, a well-run registry, stable pricing, and no governance crisis. If .nl is contracting, the cause is not mismanagement. It is a change in demand. And if demand is changing in the Netherlands — the most Internet-saturated country in Europe — it will change everywhere.

The Dutch Language in the DNS

Our dataset reveals the linguistic fingerprint of the Dutch Internet. Unlike .com — where domains are overwhelmingly English — .nl domains are full of Dutch.

38,425 .nl domains contain the word "fiets" — bicycle. In a country with more bicycles than people (23 million bikes for 18 million residents), the domain namespace reflects the culture. The Netherlands is the only country where "bicycle" is a top keyword in the national domain space. Insurance ("verzekering"), mortgages ("hypotheek"), and real estate ("makelaar") round out the commercial landscape — the pragmatic concerns of a nation that uses its ccTLD for actual business rather than speculation.

The 38,396 "webshop" domains tell the e-commerce story. The Dutch term for an online store is literally "webshop" — a direct loanword integration that became the standard term. Dutch consumers looking for an online retailer expect .nl and expect Dutch. The 82% of Dutch Internet users who choose .nl when given a choice between webshops with similar names are choosing linguistic and cultural familiarity.

Anti-Abuse: Quiet Effectiveness

SIDN does not get the attention that Nominet's governance crisis or Freenom's abuse scandal generates. Its approach to abuse prevention is characteristically Dutch: pragmatic, effective, and understated.

In October 2023, SIDN banned third-party privacy and proxy registration services for .nl domains. The finding was straightforward: domains registered through proxies were disproportionately associated with malicious activity. SIDN now cancels thousands of registrations annually when registrants cannot or will not confirm their identity.

Average phishing site uptime under .nl has been reduced from approximately 200 hours to approximately 24 hours. Seventy percent of abuse notices receive cooperative response, with malicious content removed within 24 hours. SIDN works with Netcraft as its anti-abuse partner and operates an escalation timeline: if no one closer to the source responds within 114 hours, SIDN acts directly.

SIDN Labs — the registry's research arm since 2011 — operates a 500 TB data platform analyzing DNS measurements, runs multi-year phishing analyses across .nl, .be, and .ie, develops post-quantum cryptography testbeds for DNS, and deployed a production DDoS Clearing House for the Dutch National Anti-DDoS Coalition. The RegCheck ML system detects domain abuse at the point of registration — a proactive approach that most registries have not attempted.

What's at Stake

The .nl data reveals patterns that extend well beyond the Netherlands:

• The Netherlands' Internet infrastructure footprint is wildly disproportionate to its population — 18 million people host the world's largest Internet exchange (AMS-IX), the regional Internet registry for half of Eurasia (RIPE NCC), the DNS software that powers root servers (NSD, Unbound), and a $10.5 billion data center market. Our 27.8 million .nl hostnames are 4.6x the registry count because Dutch ISPs treated reverse-DNS as standard infrastructure, not an afterthought.

• 28.6% of all .nl entries in our dataset are ISP reverse-DNS from three providers — Ziggo (6.2M), Chello (1.1M), and XS4ALL (630K). This is the fingerprint of a country where broadband penetration reached 99% and ISPs assigned individual hostnames to residential connections. The XS4ALL entries are a digital tombstone for a provider shut down in 2021 whose DNS records persist.

• The .nl namespace is contracting for the first time in its 40-year history — from a peak of 6.35 million in mid-2023 to 6.06 million at the end of 2025. SIDN identifies AI tools, declining business formation, and collapsed youth registration intent (55% to under 20% in two years) as the drivers. This is not a governance failure — it is a demand shift.

• If .nl is shrinking, no ccTLD is immune — the Netherlands has 99% Internet penetration, the highest domain density per capita, a well-run registry, stable pricing, and no governance controversy. If the most Internet-saturated country in Europe is losing domain registrations to AI and platform alternatives, every other ccTLD will follow.

• The AWS sovereignty controversy exposed a tension that every Internet-dependent nation faces — SIDN, the registry for a country that hosts RIPE NCC and AMS-IX, considered outsourcing to Amazon Web Services. Dutch Parliament halted it. The question of where national Internet infrastructure should physically reside has no settled answer, even in the country most qualified to host it.

• SIDN's Registrar Scorecard proves that incentives work where mandates fail — 60% DNSSEC adoption through pricing rebates, not regulation. No other large ccTLD has achieved comparable results. The model is replicable; the fact that almost no one has replicated it is the indictment.

What Would Help

1. Other ccTLD registries: adopt SIDN's Registrar Scorecard model before mandating technical standards. SIDN achieved 60% DNSSEC adoption through pricing incentives — registrars receive rebates for signing domains, supporting IPv6, and implementing DANE/STARTTLS. DENIC and Nominet have not achieved comparable DNSSEC penetration despite similar technical capabilities. Incentive-based programs align registrar economics with security outcomes. Mandates create compliance costs and resistance. Explore the .nl statistics page for the current .nl landscape.

2. SIDN and all ccTLD operators: take the youth registration intent data seriously. A collapse from 55% to under 20% in two years is not a blip — it is a generational shift. If the under-30 demographic in the world's most Internet-dense country has decided domains are optional, the traditional growth model for ccTLDs is broken. Registries need to articulate why a domain matters in a world where AI chatbots, social profiles, and platform storefronts serve the same functions. Browse the country statistics for the Netherlands for demographic context.

3. Internet governance researchers: study the Netherlands as an infrastructure case study. One country with 18 million people hosts AMS-IX, RIPE NCC, NLnet Labs, a $10.5 billion data center market, and produced the first active ccTLD. The concentration is not random — it traces back to CWI, EUnet, and decisions made in the 1980s. Understanding how infrastructure clusters form and compound is essential for countries trying to build their own. Access the complete dataset for cross-country infrastructure analysis.

4. Digital sovereignty advocates: learn from the SIDN-AWS episode. The Dutch Parliament halted a cloud migration that the registry's own technical leadership endorsed. The tension between operational pragmatism ("no mature European alternative") and national security ("significant risks") will repeat in every country where critical Internet infrastructure exists. The Netherlands resolved it politically. Other countries will need frameworks before the crisis arrives. Compare registry models on the TLD statistics dashboard.

5. Researchers: use the DomainsProject dataset to study ISP infrastructure fingerprints. Our 27.8 million .nl entries are 4.6x the registry count, with 28.6% from ISP reverse-DNS alone. This ratio is a measure of broadband infrastructure density. Comparing ISP footprints across ccTLDs — Ziggo's 6.2M in the Netherlands, Velox's 7.8M in Brazil, BT's entries under .uk — reveals the physical topology of national Internet access in ways that registry statistics cannot. Download the full dataset to explore.

This analysis was conducted using the DomainsProject dataset, which continuously indexes domains across all 1,519 active TLDs in the IANA root zone. The .nl namespace was parsed from the raw dataset file (27,803,330 hostnames, 5,694,120 unique second-level domains). Registry-level statistics are from SIDN (end 2025). Infrastructure data is from AMS-IX, RIPE NCC, and NLnet Labs. Historical sources include CWI, SURFnet, NLnet Foundation, and SIDN milestones. ISP data reflects VodafoneZiggo, UPC/Chello, and KPN/XS4ALL network infrastructure. Anti-abuse data is from SIDN Labs and Netcraft. AWS sovereignty reporting is from DutchNews, TechPolicy.Press, and SIDN parliamentary responses. Youth registration data is from SIDN's 2025 contraction report. Explore .nl statistics on our TLD statistics page, view country statistics for the Netherlands, browse the full TLD dashboard, or access the complete dataset for your own research.