.tk

{{Short description|Country code top-level domain for Tokelau}}

{{Update|date=February 2025}}

{{Blacklisted-links|1=

  • http://www.tweak.tk
  • :Triggered by \btweak\.tk\b on the global blacklist|bot=Cyberbot II|invisible=true}}{{Use dmy dates|date = March 2020}}

{{Infobox Top level domain

| name=.tk

| image = Dot TK logo.svg

| introduced=7 November 1997

| type=Country code top-level domain

| status=Active

| registry=Dot TK (run by BV Dot TK)

| sponsor=Government of Tokelau and Teletok

| intendeduse=Entities connected with Tokelau

|actualuse=Varied site topics; few sites relate to Tokelau

| restrictions = [http://www.freenom.com/en/dottk_contentpolicy_version21.pdf Yes, for free domains only]

| document = [http://www.freenom.com/en/doc_tcfree_freenom_v0110.pdf Registration Agreement (free domains)]
[http://www.freenom.com/en/freenom_paiddomains_tc_v0110.pdf Registration Agreement (paid domains)]

| structure=Registrations are taken directly at the second level; domains are redirected to actual website addresses within a frame, or point directly to a webserver or nameserver.

| disputepolicy=UDRP (paid domains only)

| website=[http://www.dot.tk/ Dot.TK]

}}

.tk is the Internet country code top-level domain (ccTLD) for Tokelau, a territory of New Zealand in the South Pacific.

The .tk TLD is managed by Teletok, a local telecommunications company who outsourced the domain registry operation to a Dutch company Freenom, who was additionally also acting as a registrar. As Freenom offered free registration, the .tk ending was often associated with malicious activities like phishing, spam and cybersquatting. In 2023, Freenom stopped offering new .tk registrations in their registrar business as a result of a lawsuit with Meta. Their registry operations for other registrars were not affected by this. Freenom announced it would exit the domain registry and registrar business in February 2024.

Teletok opened negotiations with the domain registry operator of .nz, for help in managing .tk after Freenom's exit.{{Cite web |last=Judah |first=Jacob |date=2023-11-02 |title=How a tiny Pacific Island became the global capital of cybercrime |url=https://www.technologyreview.com/2023/11/02/1082798/tiny-pacific-island-global-capital-cybercrime/ |access-date=2024-03-24 |website=MIT Technology Review |language=en}}

Overview

Tokelau allows any individual to register domain names. Users and small businesses were able to register any number of domain names free of charge (with some restrictions).{{cite web |last=Dot TK Registry |title=Free Domain Name Terms and Conditions |url=http://www.dot.tk/en/doc_tcfree_v360.pdf |url-status=dead |archive-url=https://web.archive.org/web/20120406191433/http://www.dot.tk/en/doc_tcfree_v360.pdf |archive-date=6 April 2012 |archive-format=PDF |access-date=22 July 2024 |website=Dot TK}} In addition to the name itself, users can opt to forward their web traffic using HTML frames and their email traffic, with a maximum of 250 addresses per user log in, or use full DNS, either via their own or third-party servers, or by using Dot TK's servers. There are content restrictions for free domains, banning sites containing sexual content, drug use, hate speech, firearms, and spam or copyright infringement. Dot TK requires free domains to have a regular traffic of visitors, and if a domain's redirect target does not work (even temporarily) the domain is taken offline. If a domain violates any of these terms, it is replaced by a Sedo advertisement page, and no advance warning is given.

Dot TK also provides .tk websites with the option to join a network called TiKinet, a close-knit network that links sites to each other based on keywords called TiKilinks. The network is expected to increase traffic to the websites, many of which are personal sites and blogs operated by individuals who otherwise would have no way to advertise their sites.{{cite web | first = Divya | last = Narain | title = Dot TK Websites Now Interlinked to One Another | work = TMCnet | date = December 19, 2007 | url = http://internetcommunications.tmcnet.com/topics/enterprise/articles/16886-dot-tk-websites-now-interlinked-one-another.htm | access-date = 2008-01-07 | archive-url = https://web.archive.org/web/20090106015635/http://internetcommunications.tmcnet.com/topics/enterprise/articles/16886-dot-tk-websites-now-interlinked-one-another.htm | archive-date = 2009-01-06 | url-status = dead }}

To be able to get a "special" .tk domain name the user must buy it. This includes trademark domain names for most Fortune 500 companies and common dictionary terms. Paid domain names cost US$19.90 for the first two years. Potentially valuable names with fewer than 4 characters are similarly unavailable for free registration and must generally be purchased at a premium price of over $1000.

Dot TK launched a new service called TweaK for Twitter users in April 2010, offering a URL shortening service that uses less space than many others, and for Facebook where the user can rename Facebook account pages with a .tk name.

In 2016, Nominet released a world map where each country was resized according to the popularity of its top-level domain. The .tk domain ranked first worldwide with 31,311,498 registered domain names (China (.cn) ranked 2nd with 16,810,737 registered domain names). The revenues from the .tk top-level domain business represent about {{fraction|6}} of the island's annual income.{{cite web|url=https://bigthink.com/strange-maps/tokelau-the-worlds-online-superpower|title=Tokelau: The World's One True Online Superpower|website=Bigthink.com|date=13 March 2016|author=Frank Jacobs|access-date=23 December 2019}}

Criticism

In 2006, McAfee conducted a survey in which they claim out of the 95 percent most trafficked web sites, .tk domains were twice as likely as the global average to be used for "unwanted behaviours", including scams such as phishing and spam.

{{cite web

| last = Field

| first = Michael

| title = Pacific atolls host world's most dangerous websites

| publisher = The Age

| date = 2007-03-16

| url = http://www.theage.com.au/news/security/pacific-atolls-host-worlds-most-dangerous-websites/2007/03/16/1173722722104.html

| access-date = 2007-11-07}}

However, in 2008 McAfee reported that the threat of scams like phishing and spam was significantly reduced with .tk and that other top level domains such as .com and .net were much more used in such scams.{{cite web

|last = Keats

|first = Shane

|title = Mapping the Mal Web, Revisited

|publisher = McAfee

|date = 2008-06-04

|url = http://us.mcafee.com/en-us/local/docs/Mapping_Mal_Web.pdf?cid=45044

|access-date = 2008-06-04

|archive-url = https://web.archive.org/web/20090813160004/http://us.mcafee.com/en-us/local/docs/Mapping_Mal_Web.pdf?cid=45044

|archive-date = 2009-08-13

|url-status = live

}}

A 2011 report by the Anti Phishing Working Group blamed Tokelau's bad reputation on the registry Dot TK. It acquired the right to operate the top level domain and is responsible for the current free registration system. .tk domains logged 2533 of 11768 (~21.5%) total phishing attacks in the second half of 2010 Internet-wide.

{{cite web

| last = Pauli

| first = Darren

| title = Pacific atoll a phishing haven

| website = ZDNet

| date = 2011-04-27

| url = https://www.zdnet.com/article/pacific-atoll-a-phishing-haven/

| access-date = 2011-11-14}}

A 2018 report by Michelle Base-Bursey stated that, "The third most prevalent TLD for phishing attacks is .tk, the country code for Tokelau, a territory north of New Zealand in the South Pacific.""[https://www.wandera.com/phishing-top-5-tlds/ Phishing epicenters: The top 5 TLD used in today's phishing attacks]" Michelle Base-Bursey, Wandera, 07 March 2018. Accessed 2021-05-05.

In 2016, the Anti-Phishing Working Group stated that the .cc, .com, .pw, and .tk domain names accounted for 75% of all malicious domain registrations.{{Cite web |url=https://www.technologyreview.com/2023/11/02/1082798/tiny-pacific-island-global-capital-cybercrime/ |language=en-US |title=How a tiny Pacific Island became the global capital of cybercrime |first=Jacob |last=Judah |date=2023-11-02 |accessdate=2023-11-10 |website=MIT Technology Review |publisher=Massachusetts Institute of Technology}}

On 3 March 2023, Meta filed a lawsuit against Freenom alleging cybersquatting violations and trademark infringement, and new domain registrations were halted.{{Cite web |date=7 March 2023 |title=Sued by Meta, Freenom Halts Domain Registrations – Krebs on Security |url=https://krebsonsecurity.com/2023/03/sued-by-meta-freenom-halts-domain-registrations/ |access-date=2023-03-15 |language=en-US}} The lawsuit references a 2021 study on the abuse of domains conducted by Interisle Consulting Group, which discovered that the ccTLDs operated by Freenom made up five of the top ten TLDs most abused by phishers. In November 2023, ICANN terminated its registrar accreditation agreement with Freenom due to failure to cure breaches of the agreement within 21 days of notice.{{Cite web |last=Hedlund |first=Jamie |date=9 November 2023 |title=RE: NOTICE OF TERMINATION OF REGISTRAR ACCREDITATION AGREEMENT |url=https://www.icann.org/uploads/compliance_notice/attachment/1219/hedlund-to-zuubier-9nov23.pdf |url-status=live |archive-url=https://web.archive.org/web/20231201051824/https://www.icann.org/uploads/compliance_notice/attachment/1219/hedlund-to-zuubier-9nov23.pdf |archive-date=1 December 2023 |access-date=22 July 2024 |website=ICANN}} On 12 February 2024, Freenom announced that it had settled the lawsuit with Meta under undisclosed terms, and that it would exit the domain name and registry business.{{Cite web |last=Versteeg |first=Karin |date=12 February 2024 |title=Press Statement |url=https://www.freenom.com/en/freenom_pressstatement_02122024_v0100.pdf |url-status=dead |archive-url=https://web.archive.org/web/20240213203456/https://www.freenom.com/en/freenom_pressstatement_02122024_v0100.pdf |archive-date=13 February 2024 |archive-format=PDF |website=Freenom}}

By early March 2024, around 99% of Freenom domains (mostly those under .tk, .cf, and .gq), roughly 12.6 million, were no longer accessible, although it was reported that some paid domains were still active. Most of these domains hosted their DNS with Cloudflare, which consequently saw a 22% drop in its number of hosted domains.{{Cite web |last=Mutton |first=Paul |date=2024-03-15 |title=Cloudflare loses 22% of its domains in Freenom .tk shutdown |url=https://www.netcraft.com/blog/cloudflare-loses-22-of-its-domains-in-freenom-tk-shutdown/ |access-date=2024-03-18 |website=Netcraft |language=en-US}}

References

{{Reflist}}