The Invisible Wall
A blog post from developer Siddhesh Poyarekar, which gained significant traction on Hacker News, highlights a frustrating problem for a growing number of site owners: using a .online domain can lead to failed email deliveries, blocked registrations on major platforms, and even silently dropped SMS messages.
Poyarekar's account, detailed on his blog 0xsid.com, describes this cascade of issues as stemming from the TLD's poor reputation. .online domains are cheap and easy to register, which has made them popular with spammers and scammers — and that history appears to have poisoned automated trust and safety systems against the TLD as a whole, regardless of who is actually using a given domain.
A Reputation Problem, Not Necessarily an AI One
Many of the systems that block or flag suspicious emails, sign-ups, and logins rely on reputation scoring — blocklists, heuristics, and in some cases machine-learned models — trained or tuned on historical abuse data. When a TLD accumulates a disproportionate amount of spam and fraud, these systems can end up treating the entire TLD as higher-risk, independent of any individual domain's actual behavior. The article's source does not specify exactly which detection methods (AI-based or otherwise) are responsible for each blocked service Poyarekar encountered, so it's worth noting the mechanism isn't confirmed to be machine-learning-driven in every case — but the practical effect, per his account, is the same either way.
The discussion thread on Hacker News suggests this isn't unique to .online: commenters described similar friction with other newer or less common TLDs, including .xyz and .club.
The Takeaway
For developers and startups picking a domain, the practical lesson from Poyarekar's experience is that a cheap or unusual TLD can carry real deliverability and trust costs, even with proper SPF, DKIM, and DMARC configuration. Warming up a new domain gradually can help, but it doesn't eliminate the disadvantage. Until reputation systems — AI-driven or otherwise — become more granular, established options like .com, .org, or a recognized ccTLD remain the safer default for anyone who can't afford deliverability problems.