---
title: "Best and Worst TLDs for Cold Email, Ranked by Abuse Reports"
description: "52 TLDs ranked by how many of eight abuse sources name them, with registration and renewal prices, beside what our own sending measured by TLD. PDF and JSON…"
url: https://warminboxes.com/blog/tld-reputation-cold-email
breadcrumb: "Home > Blog > Best and Worst TLDs for Cold Email, Ranked by Abuse Reports"
---
[WarmInboxes.com](https://warminboxes.com/)
 [Offer](https://warminboxes.com/offer)
 [Free Leads](https://warminboxes.com/leads)
 [Free Tools](https://warminboxes.com/deliverability-tools)
 [Blog](https://warminboxes.com/blog)
 [Reviews](https://warminboxes.com/reviews)

[Home](https://warminboxes.com/) › [Blog](https://warminboxes.com/blog) › Best and Worst TLDs for Cold Email, Ranked by Abuse Reports

[Back to Blog](https://warminboxes.com/blog)

Infrastructure

11 min read

November 4, 2026

# Best and Worst TLDs for Cold Email, Ranked by Abuse Reports

52 top-level domains ranked by how many of 8 abuse sources name them, with what each costs to register and renew, set beside what our own cold email sending measured by TLD. Download the full report as a PDF or JSON.

[Huzayfa Majeed](https://warminboxes.com/authors/huzayfa-majeed)

Cold Email Expert · WarmInboxes

Share this guide

![Top-level domains ranked by abuse reports for cold email]()

## Quick Answer: .com First, Then Only Zero-Flag TLDs

**Use .com** for anything you care about. In our sending it drew Google’s domain-reputation refusal least often of every TLD we measured.

**If you need another TLD,** pick from the 16 that none of the 8 abuse sources names, such as .us, .work, .pw, .website, and price the renewal before you buy, not just the first year.

**Avoid the 33 TLDs named by two or more sources**, led by .cfd and .top at 7 of 8, and avoid .link and .info on our own data: .link is named by only one source, yet drew Google’s refusal 16× as often as .com.

Download the report

Every TLD, its sources and its prices. The JSON carries the same rows as the tables on this page, with the flag count and tier worked out for you. Free to reuse under CC BY 4.0 with a link back.

[PDF report](https://warminboxes.com/research/tld-reputation-2026-11.pdf)[JSON data](https://warminboxes.com/research/tld-reputation-2026-11.json)

## Why the TLD matters at all

A receiver deciding what to do with a cold email from a domain it has never seen has very little to go on. The domain has no history, so what it has is the neighbourhood: who else registers in that TLD, and what they send. A TLD where phishing kits and spam runs are registered by the thousand is one that filters, security gateways and threat feeds have every reason to treat with suspicion, and your brand-new domain arrives carrying that suspicion before it has sent anything.

None of the receivers publishes how much weight a TLD carries. What is public is where abuse concentrates, which is what this report counts, and what our own sending shows, which is the second half of this article.

## How the report ranks TLDs

The report checks 52 TLDs against 8 independent sources that publish where abuse concentrates. A TLD’s **flag count** is how many of those sources name it, and the tier follows from the count: none, one, or two or more. A TLD that several unrelated sources keep naming is not one researcher’s opinion.

| Source | What it is | TLDs it names here |
| --- | --- | --- |
| Interisle / CIC | Interisle Consulting’s phishing and malware landscape studies, published through the Cybercrime Information Center | 24 |
| CIC 2026 quarterly | The Cybercrime Information Center’s 2026 quarterly TLD abuse data | 24 |
| Spamhaus | Its ranking of the most abused top-level domains | 22 |
| Palo Alto Networks | Palo Alto Networks’ threat research on abused TLDs | 16 |
| Cloudflare | Cloudflare’s data on the TLDs behind malicious and spam email | 13 |
| Kaspersky | Kaspersky’s spam and phishing reporting | 8 |
| NetBeacon | The NetBeacon Institute’s DNS abuse measurement | 7 |
| APWG | The Anti-Phishing Working Group’s phishing activity reporting | 3 |

The report records whether each source names a TLD, not the figure the source gives it, so it is a count of agreement, not a score.

Look up a TLD

## TLDs no source names (16)

The report calls these safe. Read that as “none of the 8 sources names them”, which is the best a TLD can do. The prices are where they differ, and the renewal is the number to look at.

| TLD | First year | Renewal | Two years | Renewal vs first year |
| --- | --- | --- | --- | --- |
| .store | $1.18 | $44.68 | $45.86 | 38× |
| .website | $1.18 | $24.68 | $25.86 | 21× |
| .cloud | $1.19 | $33.18 | $34.37 | 28× |
| .host | $1.19 | $50.68 | $51.87 | 43× |
| .press | $1.19 | $46.68 | $47.87 | 39× |
| .pw | $1.19 | $23.18 | $24.37 | 19× |
| .work | $3.18 | $18.18 | $21.36 | 5.7× |
| .us | $5.18 (NameSilo $5.49) | $8.98 (NameSilo $7.99) | $14.16 | 1.7× |
| .co.im | — | — | — | — |
| .com.im | — | — | — | — |
| .net.im | — | — | — | — |
| .org.im | — | — | — | — |
| .de | — | — | — | — |
| .nl | — | — | — | — |
| .co.in | — | — | — | — |
| .co.uk | — | — | — | — |

Namecheap list prices in US dollars, standard rather than promotional, as recorded in November 2026; NameSilo where the report had it. Two years is the first year plus one renewal. A dash means the report had no price, which is common for country-code TLDs with registration rules of their own.

### What to know before you pick one

- •**The renewal is the real price.** .host is $1.19 for the first year and $50.68 to renew, 43× the price. A cold email domain you keep past its first year pays the second number.
- •**.us has rules.** .us does not allow WHOIS privacy (registry nexus rules; public WHOIS), and requires a US person, entity or bona fide US presence.
- •**Country codes read as a country.** A .de or .co.uk domain writing to American prospects looks out of place, and most country-code registries have residency or presence rules. Use one for the market it belongs to.
- •**Some read as a product, not a company.** A prospect sees the domain before the copy. Pick the one that looks like a business would send from it.

## TLDs one source names (3)

| TLD | Named by | First year | Renewal |
| --- | --- | --- | --- |
| .link | Palo Alto Networks | $1.19 | $12.18 |
| .uno | Cloudflare | $1.19 | $32.18 |
| .im | NetBeacon | — | — |

The report files these under caution, and one of them is the reason a flag count is not the whole story. .link is named by a single source here. In our own sending it was the worst TLD we measured by a distance, which is the next section but one.

## TLDs two or more sources name (33)

Don’t send cold email from these. .cfd and .top are named by 7 of the 8 sources, and every TLD in this table is named by at least two that have nothing to do with each other.

| TLD | Flags | Named by | First year | Renewal |
| --- | --- | --- | --- | --- |
| .cfd | 7 of 8 | CIC 2026 quarterly, Cloudflare, Interisle / CIC, Kaspersky, NetBeacon, Palo Alto Networks, Spamhaus | $1.59 | $27.18 |
| .top | 7 of 8 | APWG, CIC 2026 quarterly, Cloudflare, Interisle / CIC, Kaspersky, Palo Alto Networks, Spamhaus | $1.19 | $5.78 |
| .cyou | 6 of 8 | APWG, CIC 2026 quarterly, Cloudflare, Interisle / CIC, Palo Alto Networks, Spamhaus | $1.19 | $26.18 |
| .bond | 5 of 8 | CIC 2026 quarterly, Interisle / CIC, Kaspersky, Palo Alto Networks, Spamhaus | $2.20 | $26.18 |
| .help | 5 of 8 | CIC 2026 quarterly, Interisle / CIC, NetBeacon, Palo Alto Networks, Spamhaus | $1.19 | $44.18 |
| .icu | 5 of 8 | CIC 2026 quarterly, Interisle / CIC, NetBeacon, Palo Alto Networks, Spamhaus | $1.19 | $27.18 |
| .pro | 5 of 8 | CIC 2026 quarterly, Cloudflare, Interisle / CIC, Palo Alto Networks, Spamhaus | $3.68 | $34.18 |
| .sbs | 5 of 8 | CIC 2026 quarterly, Cloudflare, Interisle / CIC, Palo Alto Networks, Spamhaus | $1.74 | $26.18 |
| .cc | 4 of 8 | CIC 2026 quarterly, Interisle / CIC, NetBeacon, Spamhaus | — | — |
| .online | 4 of 8 | CIC 2026 quarterly, Interisle / CIC, Kaspersky, Spamhaus | $1.18 | $35.88 |
| .shop | 4 of 8 | CIC 2026 quarterly, Interisle / CIC, Palo Alto Networks, Spamhaus | $1.18 | $49.18 |
| .xin | 4 of 8 | APWG, CIC 2026 quarterly, Interisle / CIC, Spamhaus | — | — |
| .xyz | 4 of 8 | CIC 2026 quarterly, Interisle / CIC, Kaspersky, Spamhaus | $2.20 | $21.68 |
| .best | 3 of 8 | Cloudflare, Interisle / CIC, Palo Alto Networks | $2.48 | $30.18 |
| .click | 3 of 8 | CIC 2026 quarterly, Palo Alto Networks, Spamhaus | $1.19 | $18.18 |
| .cn | 3 of 8 | CIC 2026 quarterly, Interisle / CIC, NetBeacon | — | — |
| .info | 3 of 8 | CIC 2026 quarterly, Interisle / CIC, Spamhaus | $4.18 | $36.18 |
| .lol | 3 of 8 | Cloudflare, Interisle / CIC, Kaspersky | $2.00 | $41.18 |
| .mom | 3 of 8 | CIC 2026 quarterly, Interisle / CIC, Spamhaus | $2.00 | $46.18 |
| .rest | 3 of 8 | CIC 2026 quarterly, Cloudflare, Spamhaus | $2.00 | $42.18 |
| .site | 3 of 8 | Interisle / CIC, Kaspersky, Palo Alto Networks | $1.18 | $30.18 |
| .vip | 3 of 8 | CIC 2026 quarterly, Interisle / CIC, Spamhaus | — | — |
| .buzz | 2 of 8 | Interisle / CIC, Kaspersky | $2.18 | $42.18 |
| .fyi | 2 of 8 | CIC 2026 quarterly, Interisle / CIC | — | — |
| .ink | 2 of 8 | CIC 2026 quarterly, Spamhaus | $3.18 | $44.18 |
| .life | 2 of 8 | CIC 2026 quarterly, Spamhaus | $3.18 | $55.18 |
| .monster | 2 of 8 | Cloudflare, Interisle / CIC | $1.64 | $17.78 |
| .one | 2 of 8 | CIC 2026 quarterly, Palo Alto Networks | $1.19 | $31.18 |
| .pics | 2 of 8 | CIC 2026 quarterly, Interisle / CIC | $2.00 | $41.18 |
| .qpon | 2 of 8 | NetBeacon, Spamhaus | — | — |
| .quest | 2 of 8 | Cloudflare, Palo Alto Networks | $2.00 | $22.18 |
| .space | 2 of 8 | Cloudflare, Palo Alto Networks | $1.18 | $33.48 |
| .wiki | 2 of 8 | Cloudflare, Spamhaus | $3.18 | $44.18 |

**Cheap is the point, for the people who made these TLDs notorious.** The cheapest renewal in the whole report, $5.78, is .top, one of the two most-named TLDs. A TLD that costs almost nothing to hold is one where a thousand throwaway domains cost almost nothing too, and the abuse follows the price.

## What our own sending measured

The report says where abuse concentrates. Our [Google sender-reputation study](https://warminboxes.com/research/google-sender-reputation) says what a TLD cost in cold email: how often Google refused mail with its permanent “very low reputation of the sending domain” verdict (550 5.7.1), as a share of every send, over 30 days to 8 October 2026.

| TLD | Sends | Google reputation refusals | Refusal rate | Against .com |
| --- | --- | --- | --- | --- |
| .com | 1,400,294 | 1,171 | 0.084% | baseline |
| .co | 528,352 | 775 | 0.147% | 1.8× |
| .org | 848,956 | 1,497 | 0.176% | 2.1× |
| .link | 197,451 | 2,619 | 1.326% | 16× |

From the [study](https://warminboxes.com/research/google-sender-reputation)’s data, which is downloadable there. .info is left out: all of its sends ran on an estate that cannot surface this refusal, so its zero means no visibility, not no refusals.

- •**.com is the baseline for a reason.** It drew the refusal least often of every TLD we sent from, and it is why every prewarmed order we sell comes with one: Every prewarmed order includes a free prewarmed .COM/.CO domain, already warmed and DNS-configured.
- •**.link is the warning about flag counts.** One source in the report, and 16× the .com refusal rate in our sending. Inside a single client, where the copy and the list are the same, .link refused 4,160 times as often as .com. We stopped buying it, and 68 .link domains still placed with clients are being retired on a schedule.
- •**.org and .co are not free passes.** Neither is in the report’s rated list, and both refused more than .com in our sending: .co 1.8×, .org 2.1×.
- •**.info has history.** Three sources in the report name it, and in June 2026 SURBL listed .info domains on Microsoft and Azure infrastructure in large numbers. [What happened](https://warminboxes.com/blog/surbl-info-domains-microsoft-azure). We stopped buying new .info too.

## How we choose TLDs for cold email

- •**.com first.** The lowest refusal rate we have measured, and the TLD a prospect reads as a company. Variations on the brand name in .com are worth more than a clean name in anything else.
- •**Then zero-flag only.** If you need more domains than .com variations give you, pick from the 16 TLDs no source names, and prefer one that reads like a business.
- •**Never two or more flags,** however cheap. The domain saves a few dollars and costs the campaign.
- •**Plan the renewal or the retirement.** Decide when you buy whether the domain lives past year one. If it does, budget the renewal; if it does not, the first-year price is the whole cost.
- •**Spread the risk.** More than one TLD and more than one registrar, so a pricing change or a suspension takes out part of the fleet, not all of it: [buying across registrars and clients](https://warminboxes.com/blog/buy-cold-email-domains-across-registrars).
- •**Check every domain, not just its TLD.** A clean TLD can hold a domain with a past. Run each one through the [domain reputation checker](https://warminboxes.com/domain-reputation-checker), the [blacklist checker](https://warminboxes.com/blacklist-checker) and the [SURBL checker](https://warminboxes.com/surbl-checker) before it sends. Our tools do not query the Spamhaus DBL, which needs a paid key, so check that at [check.spamhaus.org](https://check.spamhaus.org).

## What a flag does not tell you

- •**It is not a reputation score.** Google and Microsoft keep their own reputation data and do not publish it. A flag says abuse researchers see abuse concentrated in a TLD; what any receiver does with that is private.
- •**It is not about your domain.** A burned .com is still burned, and a well-run domain on a flagged TLD can send. The flag is the odds you start with, not the result you get.
- •**It moves.** TLDs change hands, registries change prices and abusers move to wherever is cheapest this year. This is the November 2026 picture, dated as such.
- •**Prices are list prices.** Namecheap first-year prices are standard (non-promotional) prices. Registrars change them often, and promotions come and go.

For a domain problem the TLD does not explain, describe it to the [WarmInboxes Free MCP](https://warminboxes.com/plugins/free-mcp), which runs the checks in order and says when a new domain is, and is not, the answer.

Download the report

Every TLD, its sources and its prices. The JSON carries the same rows as the tables on this page, with the flag count and tier worked out for you. Free to reuse under CC BY 4.0 with a link back.

[PDF report](https://warminboxes.com/research/tld-reputation-2026-11.pdf)[JSON data](https://warminboxes.com/research/tld-reputation-2026-11.json)

## Frequently Asked Questions

### What is the best TLD for cold email?

.com. In our own sending it drew Google's domain-reputation refusal less often than any other TLD we measured: .co 1.8× as often, .org 2.1×, .link 16×. Past .com, pick from the TLDs no abuse source names, and check the renewal price before you buy.

### Which TLDs should I avoid for cold email?

Any TLD named by two or more abuse sources: 33 of the 52 in the report, led by .cfd and .top, which 7 of 8 sources name. Also avoid .link and .info on our own evidence, even though the report counts them lower.

### Does a cheap TLD hurt deliverability?

Cheap is why abusers pick a TLD, so the cheapest end of the market is where the abuse concentrates: the cheapest renewal in the report, .top at $5.78, belongs to one of the two most-named TLDs. Price alone does not burn a domain, but a TLD full of abuse is a neighbourhood filters have learned to distrust.

### Is a TLD with no flags safe?

It means none of the sources the report counts names it. That is the best a TLD can do, and it says nothing about your domain: a clean TLD can hold a burned domain. Check every domain itself before it sends, and watch the renewal price, which on several zero-flag TLDs is many times the first year.

### Is .link bad for cold email?

In our sending, yes. Only one source in the report names .link, but across the 30 days to 8 October 2026, .link domains drew Google's permanent reputation refusal 16× as often as .com. We stopped buying new .link and .info domains.

### Can I download the TLD data?

Yes. The full report is a PDF at warminboxes.com/research/tld-reputation-2026-11.pdf, and the same rows as JSON at warminboxes.com/research/tld-reputation-2026-11.json, free to reuse under CC BY 4.0 with attribution.

Found this useful? Share it

## Add the free Deliverability Agent to your AI

Ongoing QA and advice for your cold email, to the best of our knowledge: ask it what is wrong in your own words, and it runs the checks, reads them against our published research, and tells you the fix. Works in Claude, ChatGPT, Grok and Cursor. Free, no account, no API key.
[Add it to your AI](https://warminboxes.com/deliverability-agent)
Runs on WarmInboxes Free MCP. Need inboxes? [Get prewarmed and fresh inboxes](https://app.warminboxes.com).

## Related Articles

[Infrastructure

### How to Buy Cold Email Domains Across Registrars and Clients

7 min read](https://warminboxes.com/blog/buy-cold-email-domains-across-registrars)[Deliverability

### SURBL Is Mass-Listing .info Domains on Microsoft and Azure

8 min read](https://warminboxes.com/blog/surbl-info-domains-microsoft-azure)[Deliverability

### Recover, Rest or Retire a Cold Email Domain

8 min read](https://warminboxes.com/blog/recover-rest-retire-cold-email-domain)

## Prewarmed & Fresh Inboxes

Google, Microsoft 365 and Azure inboxes with free prewarmed domains and DNS configured before you log in. Prewarmed inboxes send the day they land; every order is delivered within 48 to 72 hours.

 [Get Prewarmed & Fresh Inboxes](https://app.warminboxes.com)

More from WarmInboxes

[Google Workspace Inboxes](https://warminboxes.com/google-workspace-inboxes)[Microsoft 365 Inboxes](https://warminboxes.com/microsoft-365-inboxes)[Azure Inboxes](https://warminboxes.com/azure-inboxes)[Deliverability](https://warminboxes.com/deliverability)[Terms of Service](https://warminboxes.com/terms)[Privacy Policy](https://warminboxes.com/privacy)[Developers](https://warminboxes.com/developers)[Deliverability Agent](https://warminboxes.com/deliverability-agent)[Free Tools MCP](https://warminboxes.com/mcp-tools)[For AI Agents](https://warminboxes.com/for-ai)[Inboxes for Instantly](https://warminboxes.com/instantly-inboxes)[Inboxes for PlusVibe](https://warminboxes.com/plusvibe-inboxes)[Inboxes for Smartlead](https://warminboxes.com/smartlead-inboxes)[Inboxes for EmailBison](https://warminboxes.com/emailbison-inboxes)[Inboxes for Apollo](https://warminboxes.com/apollo-inboxes)[Inboxes for ManyReach](https://warminboxes.com/manyreach-inboxes)[Inboxes for Clay](https://warminboxes.com/clay-inboxes)[Inboxes for Claude](https://warminboxes.com/claude-inboxes)[Inboxes for ChatGPT](https://warminboxes.com/chatgpt-inboxes)[Inboxes for Grok](https://warminboxes.com/grok-inboxes)[About](https://warminboxes.com/about)[Huzayfa Majeed](https://warminboxes.com/authors/huzayfa-majeed)[How it works](https://warminboxes.com/how-it-works)[Deliverability Hub](https://warminboxes.com/deliverability-hub)[Platform](https://warminboxes.com/features)[Deliverability Monitoring](https://warminboxes.com/features/deliverability-monitoring)[Automated Reconnections](https://warminboxes.com/features/automated-reconnections)[Client Workspaces](https://warminboxes.com/features/client-workspaces)[State of Cold Email](https://warminboxes.com/state-of-cold-email)[Studies](https://warminboxes.com/research)[Placement Test Log](https://warminboxes.com/research/inbox-placement-log)[Top-Level Domains](https://warminboxes.com/research/google-sender-reputation)[SURBL Study](https://warminboxes.com/research/surbl-blocklist-study)[Playbooks](https://warminboxes.com/playbooks)[Calculator](https://warminboxes.com/calculator)[Consultation](https://warminboxes.com/consultation)[Affiliate Program](https://warminboxes.com/affiliate)[Tool demos](https://warminboxes.com/videos)[Testimonials](https://warminboxes.com/testimonials)[Reddit Reviews](https://warminboxes.com/reddit)[Prewarmed on Reddit](https://warminboxes.com/prewarmed/reddit)[Inboxes on Reddit](https://warminboxes.com/inboxes/reddit)[Revenue Boost](https://warminboxes.com/revenueboost)[MailFirst](https://warminboxes.com/mailfirst)[Agency Advanta](https://warminboxes.com/agencyadvanta)[Liquid Syntax Guide](https://warminboxes.com/playbooks/liquid-syntax-guide)[The SPAM Plague](https://warminboxes.com/playbooks/spam-plague-segmentation-playbook)[Inboxing Playbook](https://warminboxes.com/inboxing-playbook)[Data Ops Hub](https://warminboxes.com/hub/data-ops)[Agency Hub](https://warminboxes.com/hub/cold-email-agency)[Deliverability AI for ChatGPT](https://warminboxes.com/chatgpt-plugin)[Deliverability AI for Claude](https://warminboxes.com/claude-connector)

Contact

[WhatsApp +1 904 736 2539](https://api.whatsapp.com/send/?phone=19047362539&text=Hey%2C%20I%20need%20WarmInboxes&type=phone_number&app_absent=0)
 ·
 [support@warminboxes.com](mailto:support@warminboxes.com)
 ·
 Pembroke Pines, FL 33024, USA