Defaults.Exposed › Research › The Most & Least Secure Domain Endings (TLDs)
The Most & Least Secure Domain Endings (TLDs)
Data as of 2026-06-27 · 112 TLDs · from 262M+ graded domains
Of the larger domain endings we grade, which protect their businesses best — and which leave them most exposed? Here are the extremes, from the 112 TLDs with enough graded domains to compare fairly.
Your choice of domain ending is not a security strategy: the best-performing TLD still leaves most of its domains exposed. Protection comes from configuration, not the ending you pick.
Among TLDs with at least 100,000 graded domains, ranked by the share scoring grade F. Lower is better.
Least exposed
| # | TLD | Domains graded | Grade F (exposed) | Grade A–B (secure) |
|---|---|---|---|---|
| 1 | .ch | 1,387,339 | 59.1% | 1% |
| 2 | .ro | 452,609 | 60.8% | 1% |
| 3 | .sk | 276,531 | 64.6% | 1% |
| 4 | .no | 437,738 | 64.9% | 1.6% |
| 5 | .hr | 104,106 | 65.1% | 0.7% |
| 6 | .pt | 279,518 | 65.2% | 1.1% |
| 7 | .pl | 1,539,470 | 65.6% | 0.6% |
| 8 | .help | 165,454 | 65.7% | 0.1% |
| 9 | .nl | 2,996,760 | 66% | 1.6% |
| 10 | .sg | 100,490 | 68% | 1.4% |
| 11 | .dk | 622,969 | 70.2% | 1.7% |
| 12 | .ie | 173,910 | 71% | 1% |
| 13 | .ar | 415,390 | 71.2% | 0.5% |
| 14 | .mx | 691,711 | 72.2% | 0.6% |
| 15 | .cl | 425,823 | 72.2% | 0.8% |
Most exposed
| # | TLD | Domains graded | Grade F (exposed) | Grade A–B (secure) |
|---|---|---|---|---|
| 1 | .ph | 4,320,144 | 99.7% | 0% |
| 2 | .bond | 113,361 | 99.1% | 0% |
| 3 | .top | 2,954,831 | 99.1% | 0% |
| 4 | .vip | 665,474 | 98.9% | 0% |
| 5 | .cn | 2,177,636 | 98.8% | 0% |
| 6 | .xyz | 6,221,500 | 98.3% | 0.1% |
| 7 | .cfd | 301,033 | 98.2% | 0% |
| 8 | .bet | 128,098 | 98.1% | 0.1% |
| 9 | .cyou | 243,454 | 98.1% | 0% |
| 10 | .icu | 251,938 | 97.9% | 0.1% |
| 11 | .mobi | 223,657 | 97.6% | 0.1% |
| 12 | .lol | 253,013 | 97.3% | 0.6% |
| 13 | .sbs | 543,359 | 97.2% | 0.1% |
| 14 | .xn--p1ai | 330,547 | 97.1% | 0% |
| 15 | .cc | 1,169,120 | 96.9% | 0.1% |
Edition history
Each census refresh adds a dated row, so the trend is visible over time.
| Data as of | Worldwide grade-F | Least exposed | Most exposed |
|---|---|---|---|
| 2026-06-27 | 86.3% | .ch (59.1% F) | .ph (99.7% F) |
Want to know where your domain stands? Run the free check → — private; we only ever show a domain's grade to its verified owner.
How we grade → · Aggregate data only; we never publish an individual domain's grade.