Understanding the TLD Landscape: 1,519 TLDs, 3 Billion Domains, and What the Data Actually Shows

The Internet runs on a naming system most people never think about — until something breaks.

Behind every website, every email, every API call is a top-level domain. There are 1,519 active TLDs as of March 2026, ranging from the ubiquitous .com to obscure country-code extensions like .ax (Åland Islands) and new gTLDs like .motorcycles. ICANN has delegated over 1,800 TLD strings since the namespace expansion began in 2012, but not all survive. Dozens have been revoked, withdrawn, or never activated.

The conventional wisdom is simple: .com dominates, ccTLDs serve their countries, and new gTLDs are a rounding error. The data tells a more complicated story.

We analyzed 3 billion domains across 1,519 TLDs using the DomainsProject dataset — the world's largest continuously maintained Internet domains collection. We categorized every TLD by type, measured concentration, tracked registration density, and mapped the real distribution of the namespace.

The headline: three TLDs control 58% of all registered domains. The top 10 control 78%. The remaining 1,509 TLDs share the other 22% — and most of them hold less than 0.01% of the namespace each.

The Data

DomainsProject continuously crawls and indexes domains across every delegated TLD in the IANA root zone. Our dataset covers:

Domain counts are based on active DNS resolution — we count domains that resolve, not just registered strings. This means our numbers reflect the functional Internet, not registry marketing figures. Parked domains with active DNS are included; expired or suspended domains are not.

The Scorecard: TLD Concentration

Top 10 TLDs by Domain Count

.com alone holds 48% of all domains — nearly half the functional Internet resolves under a single TLD managed by Verisign. This isn't just market dominance; it's a concentration risk. A sustained .com registry outage would affect more domains than the next 15 TLDs combined.

Four of the top 10 are legacy gTLDs, accounting for 57.6% of all domains. The remaining six are ccTLDs, but they behave very differently from each other — .de serves a domestic German market, while .cn reflects China's separate Internet ecosystem.

The long tail is extreme. After the top 10, no single TLD holds more than 1.4% of the namespace. The bottom 1,000 TLDs collectively hold less than 3% of all domains.

Concentration Metrics

814 TLDs — more than half — have fewer than 10,000 domains each. Many of these are new gTLDs that never gained traction (.hair, .motorcycles, .fishing) or ccTLDs for small territories (.ax, .bv, .sj). The namespace is wide but shallow: ICANN approved hundreds of new TLDs, but registrants overwhelmingly chose the incumbents.

Legacy gTLDs: The Incumbents Hold Firm

The four legacy gTLDs — .com, .net, .org, and .info — predate the modern expansion and together account for 60% of all domains. Their dominance is structural, not accidental.

Legacy gTLD Breakdown

.com's dominance is self-reinforcing. Users assume websites end in .com. Browsers auto-complete .com. Email systems default to .com. This creates a network effect that no marketing budget for .xyz or .online can overcome. The 2012 gTLD expansion was supposed to break this lock-in — 14 years later, .com's share has barely moved.

.net at 138M serves primarily as a .com overflow — many .net registrations are defensive registrations by .com holders, or registrants who found their preferred .com taken. Its growth has been flat for years.

.org at 108M is the nonprofit and open-source namespace, but increasingly hosts commercial sites as well. The controversial 2019 attempt to sell the .org registry to a private equity firm highlighted the governance risks of TLD concentration.

.info at 42M has struggled with a reputation for spam and abuse. Its low registration cost attracts bulk registrations that inflate domain counts relative to legitimate use.

Country-Code TLDs: A Fractured Landscape

The 308 ccTLDs in our dataset represent every country and territory with an ISO 3166-1 delegation. Together they hold 810 million domains (27%), but the distribution is wildly uneven.

Top ccTLDs by Domain Count

.de is the world's largest ccTLD at 162 million domains — larger than .net and .org combined. Germany's strong domestic Internet economy, combined with DENIC's reputation for reliable registry operations, makes .de the default for German businesses. Notably, .de registration doesn't require German residency, making it accessible internationally.

.cn at 126 million reflects China's parallel Internet ecosystem. Chinese regulations require ICP licensing for .cn domains, which both limits and funnels registrations. The gap between .de and .cn has narrowed significantly — five years ago, .de led by nearly 2x.

.ru at 57 million has seen registration volatility since 2022 due to geopolitical sanctions and Russian organizations shifting to .рф (the Cyrillic IDN ccTLD). The functional .ru count in our dataset may include domains that resolve but are effectively abandoned.

The bottom 200 ccTLDs collectively hold fewer domains than .nl alone. Territories like .bv (Bouvet Island, uninhabited), .eh (Western Sahara, not delegated), and .sj (Svalbard) exist in the root zone but have negligible or zero registrations.

ccTLD Registration Density

The Netherlands has the highest domain density at 3.54 domains per capita — the Dutch register more domains per person than any other major economy. This reflects the Netherlands' position as a European hosting hub and its disproportionate digital infrastructure.

India at 0.008 domains per capita illustrates the gap. With 1.44 billion people and only 12 million .in domains, India's Internet presence runs overwhelmingly on .com. This isn't a registration failure — it's a structural preference for global TLDs in English-language-dominant tech sectors.

New gTLDs: The Expansion That Didn't Expand

ICANN's 2012 new gTLD program was supposed to transform the namespace. Over 1,200 new TLD strings were approved — .app, .blog, .shop, .xyz, .online, and hundreds more. Fourteen years later, new gTLDs hold just 13% of all domains.

Top New gTLDs by Domain Count

*.io is technically a ccTLD (British Indian Ocean Territory) but functions as a de facto gTLD for the tech industry.

.xyz leads new gTLDs at 42 million domains, boosted by aggressive pricing (often under $1/year for bulk registrations) and Google's use of abc.xyz for Alphabet's corporate site. However, .xyz has a significant spam and abuse problem — its low cost attracts the same bulk registration patterns that plagued .info.

.app and .dev together hold 25 million domains — Google Registry's strategy of requiring HTTPS by default (via HSTS preloading) gave these TLDs a security and credibility advantage that attracted legitimate tech registrations. They're the closest thing to a new gTLD success story.

.top at 24 million is almost entirely driven by Chinese registrations. Over 80% of .top domains resolve to Chinese-language content or are parked. It's the third-largest new gTLD by count, but its functional diversity is low.

New gTLD Adoption by Category

Brand TLDs are the quiet majority. There are 412 brand TLDs — more than any other category — but they collectively hold just 1.2 million domains. Companies like Google (.google), Amazon (.amazon), and BMW (.bmw) maintain these TLDs for internal use and brand protection, not public registration. Each brand TLD averages fewer than 3,000 domains.

Geographic TLDs underperformed expectations. .berlin, .tokyo, .paris, and similar city/region TLDs were supposed to create local digital identities. With an average of 179,000 domains each, most haven't achieved meaningful adoption outside niche use cases.

What's at Stake

The TLD concentration data has concrete implications:

• Three TLDs (.com, .de, .net) control 58% of all resolvable domains — a single-point-of-failure risk that the 2012 expansion was designed to address but didn't
• .com's 48% share means Verisign's operational decisions affect nearly half the functional Internet — pricing changes, policy updates, and outages have outsized impact
• 814 TLDs have fewer than 10,000 domains — many are economically unviable and at risk of registry failure, which strands existing registrants
• New gTLD abuse rates are disproportionately high — low-cost TLDs like .xyz, .top, and .site appear frequently in phishing campaigns and spam, affecting the reputation of all new gTLDs
• ccTLD fragmentation creates blind spots for security researchers — monitoring .com alone covers 48% of the namespace, but the remaining 52% spans 1,518 TLDs with different registration policies, WHOIS availability, and abuse response times
• Per-capita registration gaps between countries like the Netherlands (3.54/person) and India (0.008/person) reflect structural digital divides that TLD policy alone cannot close

What Would Help

The data points to specific actions for different audiences:

1. Security researchers: monitor the long tail. The top 50 TLDs cover 94.6% of domains, but abuse disproportionately originates from TLDs ranked 50-200. New gTLDs with low registration costs and minimal verification are favored for phishing and malware distribution. Our TLD statistics pages provide per-TLD breakdowns to help prioritize monitoring.

2. Domain investors: new gTLD growth is real but concentrated. Only 10 new gTLDs hold more than 10 million domains each. The remaining 990+ new gTLDs are speculative at best. Investment strategies should focus on TLDs with demonstrated adoption patterns, not registry marketing claims.

3. Registries: address abuse or lose credibility. TLDs with high abuse rates face browser warnings, email filtering, and reputational damage that suppresses legitimate registrations. The .xyz and .top ecosystems demonstrate that volume-at-any-cost strategies have long-term consequences.

4. ICANN: measure adoption honestly. Registry-reported registration counts include parked, defensive, and bulk-registered domains that don't represent genuine namespace adoption. Resolution-based counting — as DomainsProject uses — provides a more accurate picture of the functional Internet.

5. Enterprise security teams: build TLD-aware threat models. A phishing domain on .com carries different risk signals than one on .top or .xyz. TLD reputation scoring — factoring in abuse rates, registration verification requirements, and registry responsiveness — should inform email filtering, DNS policies, and threat intelligence pipelines.

This analysis was conducted using the DomainsProject dataset, which continuously indexes domains across all 1,519 active TLDs in the IANA root zone. Domain counts reflect active DNS resolution as of March 2026. Explore the full breakdown on our TLD statistics dashboard or access the complete dataset for your own research.