Photo by Taylor Vick on Unsplash
If you have spent any time in the hosting industry, you know that "free" is usually the most expensive price point you can offer. For years, Freenom was the case study for this paradox, handing out millions of domains like candy at a parade, only to realize the parade was mostly made up of people trying to steal your bank login. After a period of radio silence and significant legal pressure, it seems the registry has decided to try its hand at being a legitimate business.
The company has quietly resumed operations, but with a fundamental shift in its DNA: the domains are no longer free. According to a report by WebHosting.today, Freenom is once again selling registrations for the .tk, .cf, and .gq extensions. For those who remember the early 2000s, .tk was the ubiquitous badge of a site that couldn't afford a five-dollar .com. Today, it represents a legacy of digital cleanup that the industry is still dealing with.
The Reputation Debt
From a business perspective, Freenom is facing a monumental uphill battle. In this industry, reputation is a lagging indicator, and theirs has been in the gutter for a decade. By providing free real estate to anyone with an email address, they effectively subsidized the infrastructure of global phishing. When you remove the barrier to entry, you don't just get more users; you get the users who were banned everywhere else.
Now that they are charging for these extensions, they have to answer a difficult question: why would a legitimate business buy a .tk domain? The branding is synonymous with low-rent TLDs that often trigger spam filters and security warnings. If the price is comparable to a .com or a .net, the value proposition vanishes. They aren't just selling domains anymore; they are trying to sell a reason for these extensions to exist in a professional capacity, which is a much harder pitch.
It is almost impressive to see a company try to pivot from "preferred partner of the dark web" to "standard commercial registry" without changing their name, but I suppose in the domain world, we’ve seen stranger things happen during a rebrand.
Cleaning Up the Neighborhood
The transition to a paid model is a necessary step, albeit one that comes several years too late to save their standing with most security researchers. Charging even a nominal fee acts as a friction point that eliminates the bulk of automated, low-effort abuse. It turns out that when you have to provide a credit card, the thrill of launching ten thousand phishing sites loses some of its luster.
I hope they succeed in cleaning up these country-code extensions, if only for the sake of the nations they represent. But for the rest of us in the hosting and infrastructure space, we’ll be keeping their TLDs on the high-alert list for a while longer. A new price tag doesn't immediately erase a decade of bad history.