REGISTRY COMPETITIVE INTELLIGENCE

Console > HSTS Preload Research

HSTS Preloaded TLD Registry Research

Security Enforcement
Executive Security Summary

Top-Level Domains (TLDs) on the HSTS (HTTP Strict Transport Security) Preload List are hardcoded into modern web browsers (Chrome, Firefox, Safari, Edge) with the force-https directive. This permanently mandates that every single connection to any domain under these extensions must use HTTPS (port 443). Standard HTTP (port 80) is instantly blocked at the browser level.

Mandatory SSL Certificates

When buying or forwarding domains on preloaded TLDs (like .app or .dev), you MUST configure an SSL certificate from Day 1. Standard HTTP port forwarding or raw IP mapping will return browser connection errors.

"Phantom Premium" Blockades

Due to tight security baselines on preloaded extensions, registries (especially Google Registry) block unauthorized purchases of high-profile names (e.g. drive.app, cloud.app). These show up as "unavailable" or "phantom" premiums rather than being purchasable by speculators.

Preloaded Top-Level Domains (51 TLDs)

Official Chromium hardcoded namespace list

The following 51 Top-Level Domains are permanently pre-compiled into major web browsers to force secure HTTPS connections:

# TLD Extension Registry Operator Classification Security Baseline
1 .amazon Amazon Registry Brand TLD Restricted Namespace
2 .android Google Registry Brand TLD Restricted Namespace
3 .app Google Registry Generic / Open Highly Premium Flagship
4 .audible Amazon Registry Brand TLD Restricted Namespace
5 .azure Microsoft Brand TLD Restricted Namespace
6 .bank fTLD Registry Restricted Generic High-Trust Financial (MFA Mandatory)
7 .bing Microsoft Brand TLD Restricted Namespace
8 .boo Google Registry Generic / Open Secure-by-default
9 .channel Google Registry Generic / Open Secure-by-default
10 .chrome Google Registry Brand TLD Restricted Namespace
11 .dad Google Registry Generic / Open Secure-by-default
12 .day Google Registry Generic / Open Secure-by-default
13 .dev Google Registry Generic / Open Developer Flagship
14 .eat Google Registry Generic / Open Secure-by-default
15 .esq Google Registry Restricted Generic Legal Namespace
16 .fire Amazon Registry Brand TLD Restricted Namespace
17 .fly Google Registry Generic / Open Secure-by-default
18 .foo Google Registry Generic / Open Secure-by-default
19 .fujitsu Fujitsu Limited Brand TLD Restricted Namespace
20 .gle Google Registry Brand TLD Restricted Namespace
21 .gmail Google Registry Brand TLD Restricted Namespace
22 .google Google Registry Brand TLD Restricted Corporate Base
23 .hangout Google Registry Brand TLD Restricted Namespace
24 .hotmail Microsoft Brand TLD Restricted Namespace
25 .imdb Amazon Registry Brand TLD Restricted Namespace
26 .ing Google Registry Generic / Open Secure-by-default
27 .insurance fTLD Registry Restricted Generic High-Trust Finance
28 .kindle Amazon Registry Brand TLD Restricted Namespace
29 .meet Google Registry Brand TLD Restricted Namespace
30 .meme Google Registry Generic / Open Secure-by-default
31 .microsoft Microsoft Brand TLD Restricted Namespace
32 .mov Google Registry Generic / Open Media TLD
33 .new Google Registry Generic / Open Secure Action TLD
34 .nexus Google Registry Brand TLD Restricted Namespace
35 .office Microsoft Brand TLD Restricted Namespace
36 .page Google Registry Generic / Open High-Yield Content Base
37 .phd Google Registry Restricted Generic Academic Namespace
38 .play Google Registry Brand TLD Restricted Namespace
39 .prime Amazon Registry Brand TLD Restricted Namespace
40 .prof Google Registry Generic / Open Secure-by-default
41 .rsvp Google Registry Generic / Open Secure-by-default
42 .search Google Registry Brand TLD Restricted Namespace
43 .silk Amazon Registry Brand TLD Restricted Namespace
44 .skype Microsoft Brand TLD Restricted Namespace
45 .windows Microsoft Brand TLD Restricted Namespace
46 .xbox Microsoft Brand TLD Restricted Namespace
47 .xn--cckwcxetd Google Registry IDN (Japan: .みんγͺ) Secure Japanese Namespace
48 .xn--jlq480n2rg Amazon Registry IDN (China: .δΊšι©¬ι€Š) Secure Chinese Namespace
49 .youtube Google Registry Brand TLD Restricted Namespace
50 .zappos Amazon Registry Brand TLD Restricted Namespace
51 .zip Google Registry Generic / Open High-Yield Secure Flagship