Defaults.Exposed › Stats › TLDs compared
Which TLD has the worst security?
As of July 29, 2026 · census snapshot 2026-07-29
As of July 29, 2026, among TLDs with at least one million graded domains, .top has the highest security failure rate in the Defaults.Exposed census: 98.6% of its 7,927,590 graded domains score an F.
Restricted to TLDs with at least 1,000,000 graded domains so small registries cannot dominate the ranking.
| TLD | Domains graded | F rate |
|---|---|---|
| .top | 7,927,590 | 98.6% |
| .cn | 2,656,159 | 96.7% |
| .vip | 1,204,862 | 96.4% |
| .cc | 1,457,372 | 94.1% |
| .xyz | 7,858,856 | 89.0% |
| .app | 2,425,305 | 88.6% |
| .shop | 3,359,769 | 87.1% |
| .store | 1,803,231 | 86.5% |
| .site | 1,462,926 | 86.4% |
| .dev | 1,142,657 | 85.6% |
Cite this
Statistic current as of July 29, 2026. Recomputed from the live census each edition; the number on this page and the machine-readable twin always match. Please cite Defaults.Exposed and link this page.
Defaults.Exposed, "Which TLD has the worst security?" (as of July 29, 2026). https://defaults.exposed/stats/which-tld-has-the-worst-security
Permalink:https://defaults.exposed/stats/which-tld-has-the-worst-security · Machine-readable:riskiest-tld.json · Licence:open data
Methodology: how we grade the internet · Source data: defaults.exposed/data. Updated with each census edition.