·12 min read

What is a Domain Name? How Domains, TLDs, and WHOIS Work

A domain name is the human-readable address of a website — like google.com or wikipedia.org. Behind every domain lies a system of registrars, registries, WHOIS records, and expiration cycles that keep the internet organized.

What is a Domain Name?

A domain name is a human-readable address used to identify a website or online resource on the internet. Instead of typing an IP address like 142.250.80.46, you simply type google.com.

Domain names are part of the Domain Name System (DNS) — the hierarchical naming system that translates names into IP addresses. Every domain name is unique globally: no two websites can share the same domain name at the same time.

The domain name system was introduced in 1985 when symbolics.com became the first registered .com domain. Today, there are over 350 million registered domain names across all TLDs.

Domain Name Structure

A domain name is read right-to-left through the DNS hierarchy. Each part separated by a dot represents a different level:

Full URL:  https://blog.example.com/article

Breakdown:
  ┌─────────┬──────────┬─────┬────┐
  │ Protocol│ Subdomain│ SLD │TLD │
  ├─────────┼──────────┼─────┼────┤
  │ https://│ blog.    │example│.com│
  └─────────┴──────────┴─────┴────┘

  TLD  (Top-Level Domain)    → .com
  SLD  (Second-Level Domain) → example
  Subdomain                  → blog
  Protocol                   → https://

The "domain name" typically refers to:  example.com  (SLD + TLD)

More examples:
  mail.google.com       → subdomain: mail, SLD: google, TLD: .com
  en.wikipedia.org      → subdomain: en, SLD: wikipedia, TLD: .org
  bbc.co.uk             → SLD: bbc, SLD2: co, ccTLD: .uk
  docs.github.io        → subdomain: docs, SLD: github, TLD: .io

Types of Top-Level Domains (TLDs)

The TLD is the last part of a domain name — the part after the final dot. TLDs are managed by designated registries under the oversight of ICANN (Internet Corporation for Assigned Names and Numbers). There are several categories:

Generic TLDs (gTLDs)

The original and most widely recognized TLDs:

TLDIntended UseExamples
.comCommercial (now general-purpose)google.com, amazon.com
.orgOrganizations (non-profits)wikipedia.org, mozilla.org
.netNetwork infrastructure (now general-purpose)cloudflare.net, speedtest.net
.eduEducational institutions (restricted)mit.edu, stanford.edu
.govU.S. government (restricted)whitehouse.gov, nasa.gov
.milU.S. military (restricted)army.mil, navy.mil

Country Code TLDs (ccTLDs)

Two-letter codes assigned to specific countries or territories (based on ISO 3166-1):

ccTLDCountryNotable Use
.ukUnited Kingdombbc.co.uk
.deGermanyMost registered ccTLD (~17M domains)
.jpJapantoyota.jp
.ioBritish Indian Ocean TerritoryPopular with tech startups (github.io)
.aiAnguillaPopular with AI companies
.tvTuvaluUsed by media/streaming (twitch.tv)

New gTLDs

Starting in 2012, ICANN opened up applications for hundreds of new TLDs. There are now over 1,200 TLDs available:

Industry-specific:  .tech  .dev  .design  .app  .cloud  .code
Geographic:         .nyc   .london  .tokyo  .berlin  .paris
Brand TLDs:         .google  .apple  .amazon  .microsoft
Generic:            .site  .online  .store  .blog  .xyz
Community:          .church  .school  .club  .team  .social

Did You Know?

The .com TLD alone has over 160 million registrations, making it the most popular extension by far. The second most popular is .cn (China) with about 20 million, followed by .de (Germany) with about 17 million.

How Domain Registration Works

You don't actually buy a domain name — you lease (register) the exclusive right to use it for a period of 1–10 years. The domain registration system involves three key players:

Registration hierarchy:

  ICANN  (Internet Corporation for Assigned Names and Numbers)
    │     Coordinates the global domain system
    │
  Registry  (e.g., Verisign for .com, PIR for .org)
    │        Operates the authoritative database for a TLD
    │        Sets wholesale pricing
    │
  Registrar  (e.g., Namecheap, GoDaddy, Cloudflare, Google Domains)
    │         Sells domain registrations to the public
    │         ICANN-accredited
    │
  Registrant  (you — the domain owner)
              Registers a domain through a registrar for 1–10 years

Registration flow:
  1. You search for "example.com" at a registrar
  2. Registrar checks with the .com registry (Verisign) → Available!
  3. You pay the registrar (~$10–15/year for .com)
  4. Registrar submits registration to the registry
  5. Registry adds the domain to the .com zone file
  6. WHOIS/RDAP records are created
  7. You configure DNS records (A, CNAME, MX, etc.)
  8. Your domain is live!
RoleWhat They DoExamples
ICANNOversees the entire domain system, accredits registrarsOne global organization
RegistryMaintains the database for a specific TLDVerisign (.com/.net), PIR (.org), Google (.dev)
RegistrarSells domains to the public, manages renewalsNamecheap, Cloudflare, GoDaddy, Porkbun
RegistrantThe person or organization that registers (owns) the domainYou, your company

WHOIS & RDAP — Domain Ownership Records

Every registered domain has a publicly accessible WHOIS recordcontaining information about the registration. WHOIS (pronounced "who is") is a query-response protocol that dates back to the 1980s.

Typical WHOIS record for example.com:

  Domain Name:        example.com
  Registry Domain ID: 2336799_DOMAIN_COM-VRSN
  Registrar:          RESERVED-Internet Assigned Numbers Authority
  Created Date:       1995-08-14T04:00:00Z
  Updated Date:       2024-08-14T07:01:44Z
  Expiration Date:    2025-08-13T04:00:00Z
  Name Server:        A.IANA-SERVERS.NET
  Name Server:        B.IANA-SERVERS.NET
  Status:             clientDeleteProhibited
  Status:             clientTransferProhibited
  Status:             clientUpdateProhibited

Key WHOIS fields:
  Registrant     → Who registered the domain (often privacy-protected)
  Created Date   → When the domain was first registered (domain age!)
  Expiration     → When the registration expires
  Updated Date   → Last modification to the record
  Registrar      → Which company the registration is through
  Name Servers   → Which DNS servers are authoritative
  Status Codes   → Current state (active, locked, etc.)

WHOIS Privacy Protection

Since GDPR took effect in 2018, most registrars now automatically redact personal information from WHOIS records. Previously, registrant name, email, phone number, and street address were all publicly visible. Today you'll typically see:

Registrant Name:    REDACTED FOR PRIVACY
Registrant Email:   Please contact the registrar
Registrant Phone:   REDACTED FOR PRIVACY
Registrant Address: REDACTED FOR PRIVACY

RDAP: The Modern Replacement

RDAP (Registration Data Access Protocol) is the modern replacement for WHOIS. Unlike the older text-based WHOIS protocol, RDAP returns structured JSON data over HTTPS, supports internationalized content, and has built-in access control for handling privacy regulations.

Domain Age — Why It Matters

Domain ageis the time elapsed since a domain was first registered. It's calculated from the "Created Date" in the WHOIS record. Domain age is significant in several contexts:

SEO & Search Rankings

While Google has stated that domain age alone is not a direct ranking factor, older domains tend to rank better because they've had more time to:

  • Accumulate backlinks — More time online means more opportunities for other sites to link to you
  • Build authority — Consistent publishing over years establishes topical authority
  • Develop trust — Search engines have more historical data to evaluate trustworthiness
  • Index more content — Older sites typically have larger, deeper archives

Trust & Credibility

Domain age is a strong trust signal. Spam sites, phishing pages, and scam websites tend to use newly registered domains that are quickly abandoned. A domain that has been active for 10+ years is far more likely to be legitimate.

Domain AgeTrust LevelContext
0–3 monthsVery lowNew domains are frequently used for spam/phishing
3–12 monthsLow to moderateStill in the "sandbox" period for many search engines
1–3 yearsModerateEstablished but still relatively new
3–10 yearsHighWell-established with track record
10+ yearsVery highLong-standing authority, significant trust

Email Deliverability

Email providers like Gmail, Outlook, and Yahoo are more likely to deliver emails from older domains. Newly registered domains sending bulk emails frequently get flagged as spam. Many email security systems automatically flag domains less than 30 days old.

Domain Valuation

In the domain aftermarket, older domains command premium prices. A 20-year-old .com with clean history can be worth significantly more than a newly registered equivalent, especially if it has established backlinks and brand recognition.

The Domain Lifecycle

Every domain goes through a predictable lifecycle from registration to potential deletion:

Domain Lifecycle:

  ┌─────────────────────────────────────────────────────────────┐
  │  ACTIVE  (1–10 years, renewable)                           │
  │  Domain works normally. Owner can renew at any time.       │
  └─────────────────────┬───────────────────────────────────────┘
                        │ Expiration date passes, not renewed
                        ▼
  ┌─────────────────────────────────────────────────────────────┐
  │  AUTO-RENEW GRACE PERIOD  (0–45 days)                      │
  │  Registrar may auto-renew. Domain may still work.          │
  │  Owner can renew at normal price.                          │
  └─────────────────────┬───────────────────────────────────────┘
                        │ Still not renewed
                        ▼
  ┌─────────────────────────────────────────────────────────────┐
  │  REDEMPTION GRACE PERIOD  (30 days)                        │
  │  Domain stops working. DNS records removed.                │
  │  Owner can recover it for a redemption fee ($80–200+).     │
  └─────────────────────┬───────────────────────────────────────┘
                        │ Still not recovered
                        ▼
  ┌─────────────────────────────────────────────────────────────┐
  │  PENDING DELETE  (5 days)                                  │
  │  Domain is queued for deletion. Cannot be recovered.       │
  └─────────────────────┬───────────────────────────────────────┘
                        │ Deleted from registry
                        ▼
  ┌─────────────────────────────────────────────────────────────┐
  │  AVAILABLE  — Can be registered by anyone                  │
  └─────────────────────────────────────────────────────────────┘

Warning: Don't Let Domains Expire

If you let a domain expire, it can be snatched up by domain investors, competitors, or malicious actors. Always enable auto-renewal for important domains and keep your payment method up to date. Many high-profile domains have been lost due to missed renewals.

Domain Transfers

You can transfer a domain from one registrar to another. This might be done for better pricing, better DNS management, or consolidating domains. The process:

Transfer process (registrar to registrar):

1. Unlock the domain at your current registrar
2. Get the EPP/auth code (transfer authorization code)
3. Initiate transfer at the new registrar; enter EPP code
4. Approve the transfer via email confirmation
5. Wait 5–7 days for the transfer to complete
6. Domain is now at the new registrar (+ 1 year added)

Transfer restrictions:
  ✗ Cannot transfer within 60 days of registration
  ✗ Cannot transfer within 60 days of a previous transfer
  ✗ Domain must be unlocked (no clientTransferProhibited status)
  ✗ Must have a valid EPP/auth code
  ✓ Transfer adds 1 year to the registration (up to 10 years max)

Subdomains — Extending Your Domain

A subdomain is a prefix added before your domain name, creating a hierarchically separate address. Subdomains are free — you create them by adding DNS records.

Common subdomain patterns:

  www.example.com     ← The classic "www" subdomain
  blog.example.com    ← Separate blog hosted on a different platform
  shop.example.com    ← E-commerce storefront
  api.example.com     ← API endpoints
  staging.example.com ← Pre-production environment
  docs.example.com    ← Documentation site
  mail.example.com    ← Webmail interface
  app.example.com     ← Web application

You can create unlimited subdomains:
  deep.nested.sub.example.com  ← Multi-level subdomain (valid!)

Each subdomain can:
  → Point to a different IP address (A record)
  → Point to a different server (CNAME)
  → Have its own SSL certificate
  → Run a completely different website or application

Domain vs Hosting — What's the Difference?

A common source of confusion for beginners — a domain name and web hosting are two separate things that work together:

AspectDomain NameWeb Hosting
What is it?The address (name) of your websiteThe server where your website files live
AnalogyYour street addressThe actual house at that address
Cost~$10–15/year (.com)$3–100+/month depending on plan
Bought fromDomain registrarHosting provider
Can be separate?YesYes — connected via DNS records

You connect a domain to hosting by setting the domain's DNS records(usually an A record or CNAME) to point to the hosting server's IP address. You can buy your domain from one company and host your website at a completely different company.

Best Practices for Choosing a Domain

  • Keep it short and memorable — Shorter names are easier to type, remember, and share. Aim for 2–3 words maximum.
  • Choose .com when possible — It's the most recognized and trusted TLD. People will assume .com by default.
  • Avoid hyphens and numbers — They're confusing when spoken aloud ("is it dash, hyphen, or minus?") and look less professional.
  • Make it easy to spell — Avoid unusual spellings or words with common misspellings.
  • Check trademark conflicts — Search the USPTO, EUIPO, or WIPO databases before registering. Using a trademarked name can result in a UDRP dispute and loss of the domain.
  • Register for multiple years — Some SEO experts believe longer registration periods signal commitment. At minimum, enable auto-renewal.
  • Secure related TLDs — Register .com, .net, and .org variants to protect your brand and prevent typosquatting.
  • Consider future growth — Choose a name that won't limit you if your business expands into new areas.

Domain Security

Your domain is one of your most valuable digital assets. Losing control of it can be catastrophic. Key security measures:

MeasureWhat it PreventsHow to Enable
Registrar LockUnauthorized transfers to another registrarEnable in registrar dashboard (usually default)
Two-factor auth (2FA)Account takeover even if password is compromisedRegistrar account settings → Security → 2FA
WHOIS privacySocial engineering using your personal infoUsually free with registration (GDPR-compliant)
DNSSECDNS spoofing / cache poisoningEnable at both registrar and DNS provider
Auto-renewalAccidental expiration and domain snatchingEnable in registrar billing settings
Registry lockUnauthorized changes at the registry levelPremium feature — contact registrar for enterprise domains

Domain Hijacking is Real

High-profile domains have been stolen through social engineering attacks on registrar support staff, compromised email accounts, and even insider threats. Always use strong passwords, 2FA, and keep your registrar account email address secure and separate from your public contact info.

Check Any Domain's Age Instantly

Use our free Domain Age Checker to look up when any domain was registered, its expiration date, registrar info, nameservers, and WHOIS data — all in seconds.

Try Domain Age Checker →

References

  1. Mockapetris, P. (1987). RFC 1034 — Domain Names: Concepts and Facilities. https://datatracker.ietf.org/doc/html/rfc1034
  2. Daigle, L. (2004). RFC 3912 — WHOIS Protocol Specification. https://datatracker.ietf.org/doc/html/rfc3912
  3. Newton, A., et al. (2019). RFC 7483 — JSON Responses for RDAP. https://datatracker.ietf.org/doc/html/rfc7483
  4. ICANN. Domain Name Registration Process. https://www.icann.org/resources/pages/register-domain-name-2017-06-20-en
  5. Verisign. Domain Name Industry Brief. https://www.verisign.com/en_US/domain-names/dnib/index.xhtml