The names we hold back, in full.
A registry that blocks names should say which ones, and prove it. So every list below is served straight from the file the registration path itself checks. What you read here is exactly what is rejected when you register. There is no second copy to drift out of step.
Three classes of name are held back, each with its own clear, distinct reason at registration. Everything else is yours to take.
Published from the same file that enforces them.
When you ask for a label or a friendly-name, the registration path classifies it against three lists. This page renders those very lists at the moment you load it. We do not maintain a separate published copy, so the page can never quietly disagree with what is blocked. If a name appears below, asking for it is refused with a clear reason; if it does not, it is free to take. Read the rules these lists serve on the naming policy.
Reserved infrastructure names.
These 199 labels are reserved so a friendly-name cannot impersonate the infrastructure or mislead a reader: the RFC 2142 role mailbox names (hostmaster, postmaster, abuse, security, and the rest), common infrastructure hostnames, and our own Whisper service names (ns1 through ns99, doh, rdap, whois, nic, and so on). Asking for one is refused with a clear "reserved name" reason. We author this list ourselves, so it carries no external licence.
abuseadminadministratorapiassetsautoconfigautodiscoverbroadcasthostcacdncdn1cliconnectconsolecontactdnsdo-not-replydohegressfirewallftpgatewaygetgraphgwhealthhelphelpdeskhostmasteridentityimapinfoinstallisataplblocalhostloopbackmailmailer-daemonmarketingmcpmenumta-stsmxmx1mx2mx3mx4mx5mx6mx7mx8mx9newsnicno-replynocnoreplynsns1ns10ns11ns12ns13ns14ns15ns16ns17ns18ns19ns2ns20ns21ns22ns23ns24ns25ns26ns27ns28ns29ns3ns30ns31ns32ns33ns34ns35ns36ns37ns38ns39ns4ns40ns41ns42ns43ns44ns45ns46ns47ns48ns49ns5ns50ns51ns52ns53ns54ns55ns56ns57ns58ns59ns6ns60ns61ns62ns63ns64ns65ns66ns67ns68ns69ns7ns70ns71ns72ns73ns74ns75ns76ns77ns78ns79ns8ns80ns81ns82ns83ns84ns85ns86ns87ns88ns89ns9ns90ns91ns92ns93ns94ns95ns96ns97ns98ns99originpolicypoppop3postmasterpostofficeprivacyproxyrdapregistryrootroutersalessecuritysftpsmtpsmtp1smtp2smtp3smtp4smtp5smtp6smtp7smtp8smtp9sshstaticstatsstatussupporttroubletrustusenetuucpverifyvpnwebmasterwell-knownwhoiswpadwwwMatched whole-label and case-insensitively. A label that merely contains one of these as a substring is not blocked; the match is on the whole label, so it is Scunthorpe-safe.
Offensive names are rejected.
Names matching our offensive-content blocklist are rejected with a clear reason. The list is the English "List of Dirty, Naughty, Obscene, and Otherwise Bad Words" (LDNOOBW), used and republished under its Creative Commons Attribution 4.0 licence. We do not print the slurs inline here; out of plain decency the list is offered as a labelled download for anyone who needs to audit exactly what is blocked.
- 279 single-label tokens are enforced (multi-word phrases in the upstream file cannot match a single DNS label, so they are kept for reference but never block a label).
- Source: LDNOOBW, the English list. github.com/LDNOOBW.
- Licence: CC BY 4.0, with attribution as given here and on the data licence page.
The download is the exact file the registration path enforces, served verbatim, so an auditor reads precisely what is blocked.
Ordinary words stay free.
We keep a comprehensive English word list as the registry's vocabulary reference and as the basis for curating the premium set, but it is not enforced and it is not republished here: ordinary common words are yours to register. The reference is dwyl/english-words (words_alpha.txt), in the public domain under the Unlicense.
- Reference: dwyl/english-words. github.com/dwyl/english-words.
- Licence: The Unlicense (public-domain dedication).
- It is a reference only. The full word list is not blocked and not served here; see the upstream link for it.
The lists, and the licence behind them.
Read how the data and the lists may be used, or see how friendly names work.