Freenom Is Back in 2026: What the Free Domain Empire's Return Means for You

Freenom is selling domains again. That sentence should worry you

Domain Incite reported in late July that Freenom's website was, once again, selling registrations in three of its old country-code extensions: .tk, .cf and .gq, starting at 8.22 euros a year. LowEndBox covered the return on September 16. I checked the site myself this week: the domain checker is live, all three TLDs are selectable, and free-tier language still lingers in the checkout templates. The back end runs through Bitsafe, and the cart caps you at 10 domains per transaction unless you become a reseller.

There is a version of this story where the comeback makes sense. This is not that version, at least not yet. To understand why a paid Freenom is a strange beast, you need to remember what the free one cost the internet.

---

How free domains became a phishing machine

Freenom did not invent the free domain, but it industrialized it. Dutch entrepreneur Joost Zuurbier took over the .tk registry for Tokelau, a Pacific territory of about 1,500 people, in the early 2000s and started giving names away. Mali added .ml in 2013, then Gabon with .ga, the Central African Republic with .cf, and Equatorial Guinea with .gq. By the end of 2013 Freenom claimed more than 20 million active domains. By 2016, .tk was the largest country-code TLD in the world, ahead of China's .cn.

The business model was simple. Free domains came with fewer rights: no normal transfer rights, and Freenom reserved the right to deactivate names at will. When people abandoned them, Freenom reclaimed the domains and monetized leftover traffic with ads, while upselling hosting and paid registrations. Costs were tiny, so almost any revenue was profit.

The problem was who else liked free. If you are running a phishing operation that burns through 10,000 disposable domains, the difference between $10 and $0 per name is the whole business case. A 2023 Interisle study counted more than 223,000 Freenom domains used for phishing during 2022, roughly 14 percent of all phishing domains in its dataset. All five Freenom extensions ranked among the seven most-abused TLDs. At one point Freenom names represented around 60 percent of phishing domains observed across all country-code TLDs.

Free domains did not just attract hobbyists. They gave industrial-scale abuse a zero marginal cost, and the industry spent years paying for it.

---

The collapse: Meta, ICANN, and 12.6 million dead domains

Meta sued Freenom in 2023, seeking roughly $500 million over phishing and cybersquatting. Gabon had already pulled .ga back under its own control, with help from French registry operator Afnic. Mali's 10-year .ml agreement expired in July 2023 and was not renewed. In February 2024 Meta and Freenom settled on confidential terms: Freenom admitted no wrongdoing, agreed to treat Meta as a trusted notifier for abuse reports, and said it had independently decided to exit the domain business entirely, registries included.

ICANN terminated its registrar accreditation, and its gTLD registrations were transferred to Gandi. About 12.6 million domains went dark. According to security researchers, phishing on those extensions fell from over 60 percent of ccTLD abuse to under 15 percent. That drop is the cleanest natural experiment you will ever get on what free domains actually cost.

Which makes the return odd. Less than three years after pledging to leave, Freenom is running three of the same registries again, without much public explanation of how that squares with the settlement-era statements. Domain Incite notes that even names like facebooklogin.tk appear available. Draw your own conclusions about how much has changed.

---

What a rational buyer should do instead

Here is the practical question: why would anyone pay 8.22 euros, roughly $9.6, for a .tk in 2026? The extension still carries spam-filter baggage. Google spent years down-weighting it. Security vendors flag it by default. A .com at cost costs barely more and carries none of that history. If you are launching anything that matters, a project, a business, a portfolio, treat the domain as infrastructure, not a sticker.

What at-cost actually looks like right now

I track registrar pricing fairly closely, and the numbers as of September 2026 make the decision easy:

• Cloudflare Registrar — .com at $10.46 registration, renewal and transfer, all identical, because Cloudflare charges registry wholesale plus ICANN fees with zero markup. 5-year ownership cost: $52.30. Requires using Cloudflare DNS, supports 390+ TLDs, free WHOIS privacy and one-click DNSSEC.
• Porkbun — .com at $11.08 regular, $10.08 with long-running promo codes (limit 3 per customer). Renewal stays at $11.08. No DNS lock-in, free WHOIS privacy, 2FA, and a management UI that does not fight you.
• Spaceship — aggressive first-year pricing, .com around $2.90 to start with renewal near $10.18. Fine for the first year if you plan to hold the name long-term, but read the renewal line before checkout, not after.
• Namecheap — still reliable, still runs legacy promo codes that work for renewals in some cases; worth a look when transferring bulk holdings.
• Freenom — .tk/.cf/.gq from 8.22 euros per year, from a company that said it was leaving the business in 2024. For any production use, this is not a serious option.

The two rules that save you money and pain

First, never buy on first-year price alone. The .info pattern is the classic trap: $3.60 to register at Porkbun, $22.14 to renew. A "cheap" domain that renews at 6x is an annuity for the registrar. Second, keep the registrar and the DNS provider separate in your head, even when they are the same company, so a pricing change or a UX regression never traps your names. Transfers between registrars take days, not weeks, and cost roughly one year of renewal, so the exit door stays open if you choose a lock-in-free registrar.

---

Who might legitimately touch the new Freenom

To be fair: if you are a security researcher tracking old .tk infrastructure, or you want to reclaim a name you lost in the 2024 shutdown, the paid model at least removes the worst abuse incentive. Paying customers are traceable customers. And 8.22 euros is not nothing, so the economics that fueled the phishing era are genuinely gone, for now.

But for everyone else the answer has not changed since 2014: free or near-free domains are worth exactly what you pay when things go wrong. Your domain is the one asset that cannot be rebuilt from a backup. Spend the extra two dollars.

---

Bottom line

Freenom's return is an interesting footnote in domain-industry history and a useful reminder of what zero-cost naming did to the internet. It is not a buying opportunity. Cloudflare at $10.46 flat or Porkbun at $11.08 flat will cost you roughly the same per year as a .tk, with none of the reputation risk and a real company behind the renewal invoice. The free domain era is over. Good riddance.