Which zone to put your domain in — and who can take it away

Published: 2026-08-27

Any domain works with an address here: one MX record, and every name on that domain receives. All the differences live in the domain itself, and they turn out to be two separate questions that people usually merge into one.

The question	What it actually decides
Will sign-up forms accept mail from this zone?	whether the address is usable at all
Who is allowed to take the domain away?	whether it is still yours next year

The first is about a reputation you inherit from strangers. The second is about rules you agreed to without reading. A zone can be fine on one and bad on the other, which is why one “best TLD” answer does not exist.

One: the reputation you inherit

When a form sees an address at a domain it has never met, it has almost nothing to judge by. No history, no volume, no complaints — the domain was registered on Tuesday. So the filter falls back on the only thing that does have a history: the zone. What everyone else did with that zone is, for the first weeks, the whole of your reputation.

This is why zone rankings are not counts. Spamhaus, which publishes the best-known one, scores a zone by the share of domains in it that turn up in spam or malware, weighted by how many that is. So a large zone with many bad domains can rank better than a small zone that is mostly bad. The ratio is the signal; the absolute number is not.

Zones end up with a bad ratio for reasons that have nothing to do with you:

What made the zone cheap to abuse	What it does to your address
Names were given away, or sold below the cost of checking them	Bulk throwaway registrations arrive faster than the zone can clean them up.
The zone is new	There is no layer of long-held, unremarkable, legitimate domains yet to dilute the bad ones.
Anti-abuse is still being built	The gap between “registered” and “noticed” stays wide, and it gets used.
The zone's name is a marketing word	Zones like that get bought in bulk by people who want volume, not a particular name.

⚠️

We deliberately do not print a list of “bad zones” here. Such a list is correct on the day it is written and quietly wrong a year later. And a list nobody re-checks reads as current, which is worse than no list at all. This site has already made that mistake once: an entry marked “stopped working” in 2018 sat on another page until 2022. Spamhaus keeps a ranking that updates continuously; whatever it says today will always be newer than anything we could freeze into a page.

Two things follow, and they point in opposite directions. A boring, long-established zone is not a guarantee: your own domain can still be listed for what you do with it. And a zone with a poor ratio is not a verdict on your particular name; it is a headwind, not a wall. The practical effect is narrow but real: more forms refuse you on the first try, and you will not be told why.

Two: who is allowed to take it away

This is the part almost nobody reads before paying, and it is the part that differs most between zones. The useful question is not “is this registry trustworthy” — it is what does its written procedure say, and is there anybody above it.

Where the name lives	Who decides its fate	Where you go if it disappears
A generic zone under an ICANN contract — `.com`, `.net`, `.org` and the like	Your registrar, bound by an accreditation contract.	There is a defined dispute procedure (UDRP/URS) for trademark claims, a complaint route to ICANN, and ultimately the courts.
A country zone that publishes a dispute policy	The zone's administrator, under that policy.	Exactly the procedure it publishes. Worth reading before you register, not after.
A country zone that publishes none	The administrator, on its own terms.	That leaves negotiation, or a court in that country.
A free zone	Whoever runs the giveaway.	There is nowhere to go. Nothing was paid, so nothing is owed in either direction.
A name inside somebody else's domain — `you.theirdomain.tld`	The owner of the parent domain.	Nowhere either: you were never a party to any agreement.

A concrete example, quoted from the zone's own published rules rather than from anyone's complaint. In pp.ua, the administrator may block a domain for a rules violation without prior notice to the registrant or to the registrar; reinstatement after a block can carry a fee; and disputes about pp.ua domains are settled by negotiation or in court. There is no administrative appeal in that text because none was written into it. Inaccurate registrant data is the most common trigger, which is worth knowing: it is also the one thing entirely within your control.

Compare the parent zone. .ua does have a dispute policy, heard by WIPO arbitrators. It is easy to read that as “so there is an appeal” — but the policy exists for the case where somebody else claims your name, not for appealing the administrator's own decision about it. The existence of “a policy” and the existence of “a way to argue back” are different facts, and the gap between them is exactly where people are surprised.

ℹ️

The reason to own a domain at all is that nobody else decides when your address stops existing. Each row down that table hands a larger share of that decision back to somebody else. That is the real price difference between zones — not the yearly fee.

The risk people forget: the zone itself can end

Domains are usually lost one at a time. Zones are lost all at once, and nothing you did causes it.

It has already happened. The five free zones handed out by Freenom — .tk, .ml, .ga, .cf, .gq — stopped accepting new registrations in March 2023, and millions of existing names stopped resolving in the year that followed. Mali ended its contract; .ga went back to the Gabonese government. Every address on those domains died on the same day, including the ones whose owners had done nothing wrong.
A country zone exists because a territory does..io is tied to the two-letter code for the British Indian Ocean Territory. After the 2025 treaty transferring the Chagos Archipelago to Mauritius, whether that code survives is an open question. Nothing is scheduled, retiring a zone takes years of notice, and the estimates you will read are commentary rather than any decision — but “this zone depends on a political arrangement” is a real column in the table, not a hypothetical.

Neither is a reason to hurry. Both are a reason to answer one question honestly before choosing: if this zone were gone in three years, how much would that cost me? For an address you hand to your bank, a lot. For an address you need for one sign-up this afternoon, nothing at all, and then you should not be buying a domain in the first place.

What it comes down to

Boring is the feature. For an address you will rely on, a plain, long-established zone attracts no attention from filters and no attention from politics.
Read two things before paying: the renewal price — not the first-year price — and what the zone says it may do to your domain, and when.
Prefer a zone that publishes its rules at all. “No published procedure” is not a missing detail; it is the answer.
Keep the registrant data accurate. Across every zone in the table, the most common reason a domain is suspended is a record that does not check out, and it is the one cause entirely under your control.
If the address only has to survive a week, none of this applies. Take one from the front page and own nothing.

Then point it here

Once you have a domain, attaching it is one MX record — the exact values are here, and the domain debugger will confirm it took effect rather than leaving you to guess.

Where to get a domain, and what a free one really costs — the same decision from the other side: not which zone, but who you buy from.
The domain behind your address is gone. What now? — what each registry status means once it has already happened.
When a site rejects your address — the practical form of “the zone is distrusted”, and what actually helps.
Addresses at emoji and non-Latin domains — the one class of name where the zone decides whether the address is even writable.

Back to the address generator →

All articles