Public Free Suffix
github.com/PublicFreeSuffix/PublicFreeSuffixFree registrable subdomaindomains-dns/public-free-suffixJSONcomparereport an errorprovider JSON
- Free allowance
- One free label under any of six live suffixes (bg5.net, is-a.si, nastu.net, tun.re, us.mw, pfsdns.org), resolved on the operator's DNS with A, AAAA, MX, NS, CAA, TXT, CNAME, ALIAS and HTTPS records; no annual fees
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- emailno card, no phone
- Binding limit
- write-gateda GitHub account at least 2 years old is required, and the account is verified in the console
- Evidence
- documented8 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-12-04checked 2026-11-03 (live); stale on 2026-12-04
| Free tier | one free label under any of six live suffixes (bg5.net, is-a.si, nastu.net, tun.re, us.mw, pfsdns.org), resolved on the operator's DNS with A, AAAA, MX, NS, CAA, TXT, CNAME, ALIAS and HTTPS records; no annual fees unit objects; metered on object-count |
|---|
| Price | none stated |
|---|
| Limits | - write-gated (binding) a GitHub account at least 2 years old is required, and the account is verified in the console source
- retention-clamped a domain with no content for 30 consecutive days is reclaimed source
|
|---|
| Binding | write-gated the GitHub-account-age check is the gate and the 30-day empty-name reclaim is the clock; the operator can reclaim a name, so the owner of the suffix can withdraw it; the zone is on the operator's DNS unless the registrant sets NS records |
|---|
| Identity | email an account on the operator's console with a verified GitHub account at least 2 years old; no phone and no card are named on the README |
|---|
| Egress | no query cap published |
|---|
| Per-object cap | one label under a suffix, never a nested name: myname.is-a.si works and my.name.is-a.si does not; the number of labels per account is not stated on the page read |
|---|
| Retention | a domain left empty for 30 consecutive days is reclaimed; no renewal term is stated (30 days) |
|---|
| Interface | unknown a web console at s.eus/domains for search, registration and every record; the earlier pull-request flow has been retired; no record API was read |
|---|
| Tooling | the SEUS domain console, then any host that takes a DNS record |
|---|
| Composes with | a label with NS records offered in the same console, so delegation to an external DNS service is a record the registrant can set; the suffixes were not found in the captured Public Suffix List, so each name shares one Let's Encrypt count with every user of the suffix |
|---|
| Reliability | an empty name is reclaimed after 30 consecutive days, the operator can end a name, the flow changed from pull requests to a console within 2025 to 2026, and the suffixes are not on the Public Suffix List, which is an inference from absence |
|---|
| Notes | Two binds: the account-age gate, and an operator clock that reclaims an empty name after 30 days, so the owner of the suffix can withdraw it. The zone starts on the operator's DNS, and NS records let the registrant delegate. The TLS limit is a risk here: the suffixes have no entry in the captured Public Suffix List, so each suffix is one registered domain for Let's Encrypt, which is an inference from absence. |
|---|
| Evidence note | documented the repository README was read and quoted; the console and the agreements were not read; the Public Suffix List statement is an inference from the absence of an entry and cannot be quoted |
|---|
| Parsed numbers | |
|---|
Evidence 8
Unknown values 1
- interface: the access interface was not established