It was from an early web entrepreneur from Amsterdam, named Joost Zuurbier. He wished to handle Tokelau’s country-code top-level area, or ccTLD—the quick string of characters that’s tacked onto the top of a URL.
Up till that second, Tokelau, formally a territory of New Zealand, didn’t even understand it had been assigned a ccTLD. “We found the .tk,” remembered Aukusitino Vitale, who on the time was common supervisor of Teletok, Tokelau’s sole telecom operator.
Zuurbier mentioned “that he would pay Tokelau a sure amount of cash and that Tokelau would permit the area for his use,” remembers Vitale. It was all a little bit of a shock—however hanging a take care of Zuurbier felt like a win-win for Tokelau, which lacked the sources to run its personal area. Within the mannequin pioneered by Zuurbier and his firm, now named Freenom, customers might register a free area identify for a 12 months, in trade for having commercials hosted on their web sites. In the event that they wished to do away with adverts, or to maintain their web site energetic in the long run, they may pay a price.
Within the succeeding years, tiny Tokelau grew to become an unlikely web big—however not in the way in which it could have hoped. Till lately, its .tk area had extra customers than another nation’s: a staggering 25 million. However there was and nonetheless is just one web site truly from Tokelau that’s registered with the area: the web page for Teletok. Practically all of the others which have used .tk have been spammers, phishers, and cybercriminals.
Everybody on-line has come throughout a .tk––even when they didn’t understand it. As a result of .tk addresses had been supplied without spending a dime, not like most others, Tokelau rapidly grew to become the unwitting host to the darkish underworld by offering a endless provide of domains that might be weaponized in opposition to web customers. Scammers started utilizing .tk web sites to do all the things from harvesting passwords and fee data to displaying pop-up adverts or delivering malware.

CHRISSIE ABBOTT
Many consultants say that this was inevitable. “The mannequin of giving out free domains simply doesn’t work,” says John Levine, a number one knowledgeable on cybercrime. “Criminals will take the free ones, throw it away, and take extra free ones.”
Tokelau, which for years was at finest solely vaguely conscious of what was happening with .tk, has ended up tarnished. In tech-savvy circles, many painted Tokelauans with the identical brush as their area’s customers or steered that they had been incomes handsomely from the .tk catastrophe. It’s onerous to quantify the long-term injury to Tokelau, however reputations have an outsize impact for tiny island nations, the place even a number of thousand {dollars}’ value of funding can go far. Now the territory is desperately making an attempt to shake its repute as the worldwide capital of spam and to lastly clear up .tk. Its worldwide standing, and even its sovereignty, could rely upon it.
Assembly modernity
To know how we obtained right here, you must return to the chaotic early years of the web. Within the late ’90s, Tokelau grew to become the second-smallest place to be assigned a site by the Web Company for Assigned Names and Numbers, or ICANN, a bunch tasked with sustaining the worldwide web.