What is a Domain Name? How Domains, TLDs, and WHOIS Work
A domain name is the human-readable address of a website — like google.com or wikipedia.org. Behind every domain lies a system of registrars, registries, WHOIS records, and expiration cycles that keep the internet organized.
Table of Contents
- What is a Domain Name?
- Domain Name Structure
- Types of Top-Level Domains (TLDs)
- How Domain Registration Works
- WHOIS & RDAP — Domain Ownership Records
- Domain Age — Why It Matters
- The Domain Lifecycle
- Domain Transfers
- Subdomains — Extending Your Domain
- Domain vs Hosting — What's the Difference?
- Best Practices for Choosing a Domain
- Domain Security
What is a Domain Name?
A domain name is a human-readable address used to identify a website or online resource on the internet. Instead of typing an IP address like 142.250.80.46, you simply type google.com.
Domain names are part of the Domain Name System (DNS) — the hierarchical naming system that translates names into IP addresses. Every domain name is unique globally: no two websites can share the same domain name at the same time.
The domain name system was introduced in 1985 when symbolics.com became the first registered .com domain. Today, there are over 350 million registered domain names across all TLDs.
Domain Name Structure
A domain name is read right-to-left through the DNS hierarchy. Each part separated by a dot represents a different level:
Full URL: https://blog.example.com/article
Breakdown:
┌─────────┬──────────┬─────┬────┐
│ Protocol│ Subdomain│ SLD │TLD │
├─────────┼──────────┼─────┼────┤
│ https://│ blog. │example│.com│
└─────────┴──────────┴─────┴────┘
TLD (Top-Level Domain) → .com
SLD (Second-Level Domain) → example
Subdomain → blog
Protocol → https://
The "domain name" typically refers to: example.com (SLD + TLD)
More examples:
mail.google.com → subdomain: mail, SLD: google, TLD: .com
en.wikipedia.org → subdomain: en, SLD: wikipedia, TLD: .org
bbc.co.uk → SLD: bbc, SLD2: co, ccTLD: .uk
docs.github.io → subdomain: docs, SLD: github, TLD: .ioTypes of Top-Level Domains (TLDs)
The TLD is the last part of a domain name — the part after the final dot. TLDs are managed by designated registries under the oversight of ICANN (Internet Corporation for Assigned Names and Numbers). There are several categories:
Generic TLDs (gTLDs)
The original and most widely recognized TLDs:
| TLD | Intended Use | Examples |
|---|---|---|
.com | Commercial (now general-purpose) | google.com, amazon.com |
.org | Organizations (non-profits) | wikipedia.org, mozilla.org |
.net | Network infrastructure (now general-purpose) | cloudflare.net, speedtest.net |
.edu | Educational institutions (restricted) | mit.edu, stanford.edu |
.gov | U.S. government (restricted) | whitehouse.gov, nasa.gov |
.mil | U.S. military (restricted) | army.mil, navy.mil |
Country Code TLDs (ccTLDs)
Two-letter codes assigned to specific countries or territories (based on ISO 3166-1):
| ccTLD | Country | Notable Use |
|---|---|---|
.uk | United Kingdom | bbc.co.uk |
.de | Germany | Most registered ccTLD (~17M domains) |
.jp | Japan | toyota.jp |
.io | British Indian Ocean Territory | Popular with tech startups (github.io) |
.ai | Anguilla | Popular with AI companies |
.tv | Tuvalu | Used by media/streaming (twitch.tv) |
New gTLDs
Starting in 2012, ICANN opened up applications for hundreds of new TLDs. There are now over 1,200 TLDs available:
Industry-specific: .tech .dev .design .app .cloud .code
Geographic: .nyc .london .tokyo .berlin .paris
Brand TLDs: .google .apple .amazon .microsoft
Generic: .site .online .store .blog .xyz
Community: .church .school .club .team .socialDid You Know?
The .com TLD alone has over 160 million registrations, making it the most popular extension by far. The second most popular is .cn (China) with about 20 million, followed by .de (Germany) with about 17 million.
How Domain Registration Works
You don't actually buy a domain name — you lease (register) the exclusive right to use it for a period of 1–10 years. The domain registration system involves three key players:
Registration hierarchy:
ICANN (Internet Corporation for Assigned Names and Numbers)
│ Coordinates the global domain system
│
Registry (e.g., Verisign for .com, PIR for .org)
│ Operates the authoritative database for a TLD
│ Sets wholesale pricing
│
Registrar (e.g., Namecheap, GoDaddy, Cloudflare, Google Domains)
│ Sells domain registrations to the public
│ ICANN-accredited
│
Registrant (you — the domain owner)
Registers a domain through a registrar for 1–10 years
Registration flow:
1. You search for "example.com" at a registrar
2. Registrar checks with the .com registry (Verisign) → Available!
3. You pay the registrar (~$10–15/year for .com)
4. Registrar submits registration to the registry
5. Registry adds the domain to the .com zone file
6. WHOIS/RDAP records are created
7. You configure DNS records (A, CNAME, MX, etc.)
8. Your domain is live!| Role | What They Do | Examples |
|---|---|---|
| ICANN | Oversees the entire domain system, accredits registrars | One global organization |
| Registry | Maintains the database for a specific TLD | Verisign (.com/.net), PIR (.org), Google (.dev) |
| Registrar | Sells domains to the public, manages renewals | Namecheap, Cloudflare, GoDaddy, Porkbun |
| Registrant | The person or organization that registers (owns) the domain | You, your company |
WHOIS & RDAP — Domain Ownership Records
Every registered domain has a publicly accessible WHOIS recordcontaining information about the registration. WHOIS (pronounced "who is") is a query-response protocol that dates back to the 1980s.
Typical WHOIS record for example.com:
Domain Name: example.com
Registry Domain ID: 2336799_DOMAIN_COM-VRSN
Registrar: RESERVED-Internet Assigned Numbers Authority
Created Date: 1995-08-14T04:00:00Z
Updated Date: 2024-08-14T07:01:44Z
Expiration Date: 2025-08-13T04:00:00Z
Name Server: A.IANA-SERVERS.NET
Name Server: B.IANA-SERVERS.NET
Status: clientDeleteProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Key WHOIS fields:
Registrant → Who registered the domain (often privacy-protected)
Created Date → When the domain was first registered (domain age!)
Expiration → When the registration expires
Updated Date → Last modification to the record
Registrar → Which company the registration is through
Name Servers → Which DNS servers are authoritative
Status Codes → Current state (active, locked, etc.)WHOIS Privacy Protection
Since GDPR took effect in 2018, most registrars now automatically redact personal information from WHOIS records. Previously, registrant name, email, phone number, and street address were all publicly visible. Today you'll typically see:
Registrant Name: REDACTED FOR PRIVACY
Registrant Email: Please contact the registrar
Registrant Phone: REDACTED FOR PRIVACY
Registrant Address: REDACTED FOR PRIVACYRDAP: The Modern Replacement
RDAP (Registration Data Access Protocol) is the modern replacement for WHOIS. Unlike the older text-based WHOIS protocol, RDAP returns structured JSON data over HTTPS, supports internationalized content, and has built-in access control for handling privacy regulations.
Domain Age — Why It Matters
Domain ageis the time elapsed since a domain was first registered. It's calculated from the "Created Date" in the WHOIS record. Domain age is significant in several contexts:
SEO & Search Rankings
While Google has stated that domain age alone is not a direct ranking factor, older domains tend to rank better because they've had more time to:
- Accumulate backlinks — More time online means more opportunities for other sites to link to you
- Build authority — Consistent publishing over years establishes topical authority
- Develop trust — Search engines have more historical data to evaluate trustworthiness
- Index more content — Older sites typically have larger, deeper archives
Trust & Credibility
Domain age is a strong trust signal. Spam sites, phishing pages, and scam websites tend to use newly registered domains that are quickly abandoned. A domain that has been active for 10+ years is far more likely to be legitimate.
| Domain Age | Trust Level | Context |
|---|---|---|
| 0–3 months | Very low | New domains are frequently used for spam/phishing |
| 3–12 months | Low to moderate | Still in the "sandbox" period for many search engines |
| 1–3 years | Moderate | Established but still relatively new |
| 3–10 years | High | Well-established with track record |
| 10+ years | Very high | Long-standing authority, significant trust |
Email Deliverability
Email providers like Gmail, Outlook, and Yahoo are more likely to deliver emails from older domains. Newly registered domains sending bulk emails frequently get flagged as spam. Many email security systems automatically flag domains less than 30 days old.
Domain Valuation
In the domain aftermarket, older domains command premium prices. A 20-year-old .com with clean history can be worth significantly more than a newly registered equivalent, especially if it has established backlinks and brand recognition.
The Domain Lifecycle
Every domain goes through a predictable lifecycle from registration to potential deletion:
Domain Lifecycle:
┌─────────────────────────────────────────────────────────────┐
│ ACTIVE (1–10 years, renewable) │
│ Domain works normally. Owner can renew at any time. │
└─────────────────────┬───────────────────────────────────────┘
│ Expiration date passes, not renewed
▼
┌─────────────────────────────────────────────────────────────┐
│ AUTO-RENEW GRACE PERIOD (0–45 days) │
│ Registrar may auto-renew. Domain may still work. │
│ Owner can renew at normal price. │
└─────────────────────┬───────────────────────────────────────┘
│ Still not renewed
▼
┌─────────────────────────────────────────────────────────────┐
│ REDEMPTION GRACE PERIOD (30 days) │
│ Domain stops working. DNS records removed. │
│ Owner can recover it for a redemption fee ($80–200+). │
└─────────────────────┬───────────────────────────────────────┘
│ Still not recovered
▼
┌─────────────────────────────────────────────────────────────┐
│ PENDING DELETE (5 days) │
│ Domain is queued for deletion. Cannot be recovered. │
└─────────────────────┬───────────────────────────────────────┘
│ Deleted from registry
▼
┌─────────────────────────────────────────────────────────────┐
│ AVAILABLE — Can be registered by anyone │
└─────────────────────────────────────────────────────────────┘Warning: Don't Let Domains Expire
If you let a domain expire, it can be snatched up by domain investors, competitors, or malicious actors. Always enable auto-renewal for important domains and keep your payment method up to date. Many high-profile domains have been lost due to missed renewals.
Domain Transfers
You can transfer a domain from one registrar to another. This might be done for better pricing, better DNS management, or consolidating domains. The process:
Transfer process (registrar to registrar):
1. Unlock the domain at your current registrar
2. Get the EPP/auth code (transfer authorization code)
3. Initiate transfer at the new registrar; enter EPP code
4. Approve the transfer via email confirmation
5. Wait 5–7 days for the transfer to complete
6. Domain is now at the new registrar (+ 1 year added)
Transfer restrictions:
✗ Cannot transfer within 60 days of registration
✗ Cannot transfer within 60 days of a previous transfer
✗ Domain must be unlocked (no clientTransferProhibited status)
✗ Must have a valid EPP/auth code
✓ Transfer adds 1 year to the registration (up to 10 years max)Subdomains — Extending Your Domain
A subdomain is a prefix added before your domain name, creating a hierarchically separate address. Subdomains are free — you create them by adding DNS records.
Common subdomain patterns:
www.example.com ← The classic "www" subdomain
blog.example.com ← Separate blog hosted on a different platform
shop.example.com ← E-commerce storefront
api.example.com ← API endpoints
staging.example.com ← Pre-production environment
docs.example.com ← Documentation site
mail.example.com ← Webmail interface
app.example.com ← Web application
You can create unlimited subdomains:
deep.nested.sub.example.com ← Multi-level subdomain (valid!)
Each subdomain can:
→ Point to a different IP address (A record)
→ Point to a different server (CNAME)
→ Have its own SSL certificate
→ Run a completely different website or applicationDomain vs Hosting — What's the Difference?
A common source of confusion for beginners — a domain name and web hosting are two separate things that work together:
| Aspect | Domain Name | Web Hosting |
|---|---|---|
| What is it? | The address (name) of your website | The server where your website files live |
| Analogy | Your street address | The actual house at that address |
| Cost | ~$10–15/year (.com) | $3–100+/month depending on plan |
| Bought from | Domain registrar | Hosting provider |
| Can be separate? | Yes | Yes — connected via DNS records |
You connect a domain to hosting by setting the domain's DNS records(usually an A record or CNAME) to point to the hosting server's IP address. You can buy your domain from one company and host your website at a completely different company.
Best Practices for Choosing a Domain
- Keep it short and memorable — Shorter names are easier to type, remember, and share. Aim for 2–3 words maximum.
- Choose .com when possible — It's the most recognized and trusted TLD. People will assume .com by default.
- Avoid hyphens and numbers — They're confusing when spoken aloud ("is it dash, hyphen, or minus?") and look less professional.
- Make it easy to spell — Avoid unusual spellings or words with common misspellings.
- Check trademark conflicts — Search the USPTO, EUIPO, or WIPO databases before registering. Using a trademarked name can result in a UDRP dispute and loss of the domain.
- Register for multiple years — Some SEO experts believe longer registration periods signal commitment. At minimum, enable auto-renewal.
- Secure related TLDs — Register .com, .net, and .org variants to protect your brand and prevent typosquatting.
- Consider future growth — Choose a name that won't limit you if your business expands into new areas.
Domain Security
Your domain is one of your most valuable digital assets. Losing control of it can be catastrophic. Key security measures:
| Measure | What it Prevents | How to Enable |
|---|---|---|
| Registrar Lock | Unauthorized transfers to another registrar | Enable in registrar dashboard (usually default) |
| Two-factor auth (2FA) | Account takeover even if password is compromised | Registrar account settings → Security → 2FA |
| WHOIS privacy | Social engineering using your personal info | Usually free with registration (GDPR-compliant) |
| DNSSEC | DNS spoofing / cache poisoning | Enable at both registrar and DNS provider |
| Auto-renewal | Accidental expiration and domain snatching | Enable in registrar billing settings |
| Registry lock | Unauthorized changes at the registry level | Premium feature — contact registrar for enterprise domains |
Domain Hijacking is Real
High-profile domains have been stolen through social engineering attacks on registrar support staff, compromised email accounts, and even insider threats. Always use strong passwords, 2FA, and keep your registrar account email address secure and separate from your public contact info.
Check Any Domain's Age Instantly
Use our free Domain Age Checker to look up when any domain was registered, its expiration date, registrar info, nameservers, and WHOIS data — all in seconds.
Try Domain Age Checker →References
- Mockapetris, P. (1987). RFC 1034 — Domain Names: Concepts and Facilities. https://datatracker.ietf.org/doc/html/rfc1034
- Daigle, L. (2004). RFC 3912 — WHOIS Protocol Specification. https://datatracker.ietf.org/doc/html/rfc3912
- Newton, A., et al. (2019). RFC 7483 — JSON Responses for RDAP. https://datatracker.ietf.org/doc/html/rfc7483
- ICANN. Domain Name Registration Process. https://www.icann.org/resources/pages/register-domain-name-2017-06-20-en
- Verisign. Domain Name Industry Brief. https://www.verisign.com/en_US/domain-names/dnib/index.xhtml