Defaults.Exposed › Reports
Domain Decay by TLD: Where Domains Go to Die (2026)
Published 2026-06-28
Figures as of 2026-06-28 · methodology v7. Aggregate census data. “Decay rate” is the share of an ending’s known domains that no longer resolve. See how we grade and the internet’s dead domains.
Domains don’t die at the same rate — it depends entirely on the ending. Across all domains we track, about 6.2% no longer resolve. But that average hides an enormous spread: on cheap, bulk-registered endings like .xyz, roughly 15.5% of domains are already dead, while on established national registries like .jp and .no the figure is barely 2.0–2.0%. The same endings that are least secure are also the ones that decay fastest.
Domain decay rate by ending
The share of each ending’s domains that no longer resolve. Higher means faster decay. As of 2026-06-28.
| Domain ending | Type | Decay rate (dead) | Grade-F share |
|---|---|---|---|
| .xyz | Cheap / bulk gTLD | 15.5% | 98.3% |
| .top | Cheap / bulk gTLD | 9.0% | 99.0% |
| .cc | Repurposed ccTLD | 12.0% | 96.8% |
| .online | Generic gTLD | 9.0% | 93.3% |
| .com | Legacy gTLD | 5.0% | 86.9% |
| .nl | National (Netherlands) | 4.8% | 69.1% |
| .de | National (Germany) | 4.0% | 81.0% |
| .ch | National (Switzerland) | 2.8% | 57.1% |
| .jp | National (Japan) | 2.0% | 82.0% |
| .no | National (Norway) | 2.0% | 65.5% |
National (ccTLD) endings as a group decay at about 7.0%; generic (gTLD) endings at about 5.9% — but the gTLD figure is pulled up sharply by a handful of cheap bulk endings.
Why do some domain endings decay so much faster?
The pattern is the same one that drives the security gap: price and intent.
- Cheap, bulk endings are bought to be disposable. Endings priced at pennies attract speculative, throwaway and campaign registrations. Many are never renewed past the first cycle — so a large share quietly stops resolving.
- National registries attract committed owners. A
.deor.jpis more often a real, lasting business presence. Those domains get renewed, so they stay alive. - Decay and insecurity share a root cause: neglect. An owner who never configured SPF, DMARC or DNSSEC is also an owner who is more likely to let the domain lapse. That’s why the high-decay column and the high-F column line up so closely.
What domain decay means for the web
A high decay rate on an ending is a useful signal in two directions:
- For trust: a link, an email address, or a citation on a fast-decaying ending is statistically more likely to be dead — or, worse, re-registered by someone else. Expired domains on popular endings get snapped up, sometimes to inherit old reputation or traffic.
- For security: an ending where domains are routinely abandoned without ever being locked down is a richer hunting ground for spoofing and impersonation, because so many of its domains are unwatched.
Frequently asked questions
What percentage of domains are dead? As of 2026-06-28, about 6.2% of the 333 million domains we track no longer resolve — but the rate ranges from around 2.0% on stable national endings to 15.5%+ on cheap bulk endings.
Which TLD has the most dead domains? Among large endings, cheap high-volume ones like .xyz (15.5%) and .top (9.0%) have the highest decay rates. Established national registries have the lowest.
Why do .xyz and .top domains die so often? They’re inexpensive and bought in bulk for short-lived or speculative use, so a large share are never renewed.
Are dead domains a security risk? Yes — an abandoned domain that was never protected can still be impersonated, and an expired domain can be re-registered by someone who inherits its old trust. See the internet’s dead domains.
Don’t let your domain quietly decay — or stay exposed
Whether it’s your main site or an old one you forgot, check what it exposes today — privately and free, with a per-check breakdown and how to fix it.
Check your domain → · Most & least secure TLDs → · How we grade → · Aggregate data only. Data stored and processed in the EU.