The domain desk · ten instruments, one rule

Ask the registry.
Then read all of it.

Any name on any ending, put to its own registry — RDAP where the ending has it, port-43 WHOIS where it does not — and the whole record set out below. Then the other instruments ask the rest of the world: its DNS, its mail, its certificates, its past, its look-alikes, its price.

DC‑W1 WHOIS receiver

RDAP · WHOIS · DNS Its own page

Paste anything with a name in it — https://www.bbc.co.uk/news, ops@nic.io — and the registrable domain is found.

Mode
Instrument
Try

What a report holds

Twelve panels, in this order, for every name that turns out to be registered. A name nobody has registered gets a different page: where to check it, and the ending's own facts.

01

Registration

Created, updated, expires; its age, the days left, and the whole lifecycle drawn to scale.

02

Registrar

Who sold it, their IANA number, their servers, and where abuse is reported.

03

Status

Every EPP code as a lit key, what each one stops, and whether the name is registry-locked.

04

Nameservers

The delegation, who runs it, the glue addresses, and whether DNS agrees with the registry.

05

Mail & security

Who takes the mail, and how SPF, DMARC, MTA-STS, TLS-RPT and DNSSEC defend it — graded.

06

Where it lives

Each address traced to its network: AS number, operator, prefix, country, registry.

07

Contacts

Registrant, admin, tech, billing and abuse, with redaction and privacy services flagged.

08

DNS

A, AAAA, CNAME, NS, MX, TXT, CAA, SOA, HTTPS, DS and DNSKEY, every row copyable.

09

The ending

What kind of TLD it is, who runs it, its servers and its IANA record.

10

Sources

Every server asked, in what role, how long it took, and what it said back.

11

Every field

Each line the registry and registrar published, in order, with a filter.

12

Raw

The untouched RDAP JSON and WHOIS text, registry, registrar and IANA.

DC‑1000 Band scale · ten instruments

Nothing kept yet — what you keep stays in this browser
Band 3

Guard your brand & mail

I protect a brand and its mail.

Check yours ↓
07DC‑L1 Look-alike scanner Typo-squats and homoglyphs of a brand, and which are registered. DNS · registry RDAP 08DC‑M1 Email security doctor SPF, DMARC, DKIM, MTA-STS graded — with the records to fix them. DNS · the MTA-STS policy file
What the scanner hunts

The same on screen, three different names to a registry. The scanner tries these, swapped and missing letters, and other endings.

Band 4

Buy well

I am buying.

Price one ↓
09DC‑R1 Registrar prices First year against renewal, for every ending — and ten years of it. Porkbun · one registrar 10DC‑G1 The generator The original: a hundred names a run, each put to its own registry when you ask. In this page · offline
Yours, from the desk — kept in this browser
Lookups
On the shortlist
T3Instrument

Your WHOIS history and the generator’s shortlist live here and nowhere else. Nothing was sent to show you this.

Four instruments that answer here

DC‑P1 · C1 · H1 Know a name

UDP 53 · 14 resolvers

I have a name in mind.

The desk above reads its registry record. These ask the rest of the world about the same name — whether the resolvers agree, what certificates say, what it used to be.

Record

crt.sh and the Wayback Machine take ten to twenty-five seconds, so they answer on their own pages.

A record · fourteen resolvers against the authority

Asked only when you press the key — nothing is sent before.

Asked by this site’s server over UDP 53. Public resolvers are anycast: each answer is from the node our server reached.

DC‑W2 · W3 Keep your names

Kept in this browser

I hold names.

Paste them — a list, a CSV, an invoice, any text with names in it. They go onto a board in this browser; the board dates each one and warns when a transfer lock is off.

Nothing pasted yet. Ctrl+Enter adds.

What went onto the board
Found
Added
Already there

Nothing added yet — the board is only written when you press a key.

Read by the same parser as the watchlist’s import. Only the names are sent — one lookup at a time, when the board checks them.

DC‑L1 · M1 Guard your brand & mail

SPF · DMARC · DKIM · MTA-STS

I protect a brand and its mail.

Grade its email here — the policies that stop someone sending as you. Then scan for the names built to be mistaken for it.

Give it a brand’s domain and a look-alike of it is drawn here, without asking anyone.

Email defences · graded A to F

Asked only when you press the key — nothing is sent before.

DNS read by this site’s server. STARTTLS is not tested: outbound port 25 is blocked on this host.

DC‑R1 · G1 Buy well

Porkbun · one registrar

I am buying.

The first year is the advert; the renewal is the price. Ask what an ending costs every year after the first.

Try
One ending · US dollars · a standard name
––.––First year
––.––Renewal
––.––The trap / yr
–––.––Ten years

Asked only when you press the key — nothing is sent before.

One registrar’s public prices (Porkbun), list prices in US dollars, no promotions, no affiliate links. Ten years = first year + 9 × renewal.

The rules

One rule, ten instruments.

01

The registry, asked directly.

RDAP from IANA’s own bootstrap, port-43 WHOIS where an ending has no RDAP, DNS beside both. No redirector — the one this site used to rely on took 4.7, 13.0 and 31.7 seconds to answer — and no scraped forms.

02

Not registered is not for sale.

Registries hold names back — reserved, premium, blocked for brands — and those answer the same way. Not registered is the most any instrument here says; a registrar’s search has the last word.

03

Silence is “probably”, in amber.

No record and no nameservers is Probably unregistered — never green, because a parked, undelegated name looks exactly the same.

04

A failure is Unknown.

A timeout, a refusal, a slow crt.sh: Unknown, with a way to ask again. Nothing is cached as good news.

05

Every figure names its source.

CT logs show certificates issued, not hosts that exist. The Wayback Machine is partial. Porkbun is one registrar. Public resolvers are anycast. Lifecycle dates are estimates by a stated rule; country codes publish no timetable, so none is drawn.

06

What you keep stays here.

Watch lists, your WHOIS history and the shortlist live in this browser; only the names you ask about are sent. The WHOIS and the tools run on this host, which asks the registries, resolvers, crt.sh, the Wayback Machine and Porkbun for you and caches their answers so each is asked once. No accounts, no affiliate links.

Five answers Registered Not registered Probably unregistered No RDAP Unknown

10 · The generator — the original

Make some names.

3 modes · 5 sets of endings · 110 endings · works offline · nothing is sent until you ask

DC‑G1 Name generator

Ten neighbours: prefixed, suffixed, doubled, devowelled, numbered.

Every ending keeps the word and replaces the suffix, checking it across whichever set is selected below — three names on Classic, a hundred and ten on All.

One per line, or separated by commas. A word with no ending is read as .com. Up to 100 at a time; anything over that is reported rather than dropped. Ctrl+Enter checks the list.


Endings
How the name is built
5
none
How many per run
G generate   / root word   Esc cancel

0 names

Nothing generated yet.

Press Generate, or give the first field a word to work from. Names appear here; each row has a lookup, a star and a copy.

What the five answers mean
  • Not registered — the registry for a contracted gTLD holds no record, so nobody holds the name. Registries also keep names back — reserved, blocked for brand owners, premium — that answer the same way, so a registrar’s search has the last word.
  • Registered — there is a record, and it is shown: registrar, dates, nameservers. Or there is no readable record but the name is delegated, which settles it just as well.
  • Probably unregistered — the ending publishes no registration data, and the name has no nameservers. Both signals point one way; neither is a guarantee.
  • No RDAP — the ending published nothing and DNS was inconclusive too.
  • Unknown — the request timed out, was refused, or the registry errored. Worth retrying.

The whole page works offline except the lookups, and no name you generate leaves the browser unless you ask for one to be checked.

A social handle cannot be checked from a browser: every platform refuses the request. The social links open the profile address; a 404 there means no profile at that address, and the platform’s own sign-up has the last word.

The five sets of endings

A set is only a pool the generator draws its ending from. What matters to the lookup is which kind of ending a name lands on — a contracted gTLD answers, and a country code may not.

Classic
.com .org .net — the three that existed before the expansion, and still where most of the value is.
3 endings
Major
The three above plus .io .ai .co .xyz .shop .online .tech .app .dev .store .site .pro .info .me .tv — what a new product is usually named on.
18 endings
Regional
.us .uk .ca .de .fr .it .es .nl .au .nz .br .mx .ar .in .cn .jp .kr .ru .za .sg .hk .tw — every one a country code, so read the lookup carefully.
22 endings
Lab
.inc .llc .net .com.im .nyc .la — the endings this project's own properties use.
6 endings
All
Everything above and the long tail with it: money, health, food, travel, events and the rest.
110 endings
Where to register — six, no affiliate links

When a name comes back not registered, its row offers Spaceship, Porkbun, Namecheap, GoDaddy, IONOS and Hostinger, each opening its own search for that exact name — the plain search URLs, with no affiliate parameters.