Where does the data come from?

The IANA Root Zone Database (data.iana.org/TLD/tlds-alpha-by-domain.txt) plus registry metadata. It is bundled with the site and refreshed at build time.

Is my search sent anywhere?

No. The full list is shipped to your browser and filtered locally.

What's the difference between gTLD and ccTLD?

gTLDs are generic (.com, .org, .xyz) and managed by registries under ICANN agreement. ccTLDs are country-code (.uk, .de) and managed by each country's designated authority, often with their own rules.

Why are some TLDs not available to register?

Brand TLDs (.google, .bmw) are restricted to the brand owner. Some ccTLDs require local presence. Infrastructure TLDs like .arpa are reserved for technical use.

tld · gtld · cctld · iana · search

Browse TLDs — gTLDs and ccTLDs

Search a curated set of common top-level domains by name, country, or notes. Tagged by type and annotated with quirks like HSTS preloads.

TLD Browser

Match

tlds

Total

indexed

Filter

all

type

Query

—

input · filters

This is a curated subset of the IANA TLD list — common gTLDs, sponsored TLDs, popular new gTLDs, and major ccTLDs.

Type-filter buttons:

gTLD — generic (.com, .net, .org)
ccTLD — country code (2 letters)
sTLD — sponsored (.gov, .edu, .mil)
new gTLD — post-2012 expansions (.dev, .app)

Full IANA registry: data.iana.org/TLD/tlds-alpha-by-domain.txt (~1,500 entries).

output · matching tlds

.comgTLD

Commercial. Default global.

.netgTLD

Network — originally for ISPs.

.orggTLD

Originally for non-profits, now general.

.infogTLD

.bizgTLD

.namegTLD

For individuals.

.govsTLD

US government only.

.edusTLD

US accredited education.

.milsTLD

US military.

.intsTLD

International treaty organisations.

.devnew gTLD

Auto-HSTS preloaded. Requires HTTPS.

.appnew gTLD

Auto-HSTS preloaded.

.ioccTLD

British Indian Ocean Territory

Popular for tech startups.

.aiccTLD

Anguilla

Popular for AI startups.

.coccTLD

Colombia

Often used as .com alternative.

.meccTLD

Montenegro

.tvccTLD

Tuvalu

.fmccTLD

Federated States of Micronesia

.lyccTLD

Libya

.ggccTLD

Guernsey

Popular for gaming.

.cloudnew gTLD

.technew gTLD

.onlinenew gTLD

.storenew gTLD

.blognew gTLD

.xyznew gTLD

.sitenew gTLD

.pagenew gTLD

Auto-HSTS preloaded.

.pronew gTLD

.studionew gTLD

.usccTLD

United States

.ukccTLD

United Kingdom

.deccTLD

Germany

.frccTLD

France

.jpccTLD

Japan

.cnccTLD

China

.ruccTLD

Russia

.brccTLD

Brazil

.inccTLD

India

.auccTLD

Australia

.caccTLD

Canada

.nlccTLD

Netherlands

.seccTLD

Sweden

.noccTLD

Norway

.dkccTLD

Denmark

.ficcTLD

Finland

.plccTLD

Poland

.esccTLD

Spain

.itccTLD

Italy

.chccTLD

Switzerland

.atccTLD

Austria

.beccTLD

Belgium

.krccTLD

South Korea

.sgccTLD

Singapore

.twccTLD

Taiwan

.mxccTLD

Mexico

.arccTLD

Argentina

.zaccTLD

South Africa

Quick Start

How to read TLD types

TLDs fall into a small handful of categories. Knowing the type tells you what restrictions and quirks to expect.

01
Filter by type
Pick gTLD, ccTLD, sTLD, or new gTLD to narrow the list.
Lookups reference the IANA registries (MIME, HTTP status, TLDs) bundled at build time — no live network calls, no rate limits, no leaked queries.
filterIANAregistryofflinelive
type · queryany · IANA
```
gTLD · ccTLD · sTLD
```
loaded · IANA bundlespec · ready
02
Search
Free-text search across TLD, country, and notes.
Builders emit canonical syntax per the relevant RFC (9110 for HTTP, 5322 for headers, 3986 for URLs) so the output passes spec-compliant parsers.
searchRFC 9110canonicalspec-compliantlive
query · optionsfree · live
```
io · ai
```
options applied · livecanonical
03
Read annotations
HSTS preloads, common uses, and registry quirks are surfaced.
Validation flags common pitfalls — uppercase header names, smart quotes inside Content-Type, missing ;charset=utf-8 — before they bite production.
notesvalidationlintpitfallslive
notes · looked upcontext · ready
```
HSTS · use case
```
result · livevalidated
04
Copy list
Bulk-copy the filtered TLDs for a checklist or DNS policy.
Copy writes the snippet directly into your clipboard; downloads emit the right extension and MIME so curl/httpie pick them up correctly.
exportclipboardMIME-correctblobcurl-ready
ok · copiedready · done
```
copy list
```
shipped · ready to shipsuccess

Pro tips

Web-spec details that bite later

Idempotency saves retries

POST/PUT/DELETE should be safely retried. Use idempotency keys and return the same response on duplicate requests.

Match RFC 9110 status codes

Don’t invent codes. 422 for validation errors, 409 for conflicts, 429 for rate limits. Standard codes work with off-the-shelf clients.

Set <code>Cache-Control</code> deliberately

Default browser caching is conservative. Use max-age + stale-while-revalidate for hot endpoints.

Validate Open Graph in dev

OG tags break silently. Use a previewer like OG Generator + Facebook’s debugger before launch.

CORS is a server concern

The browser sends the preflight; the server decides. Wildcard origins disable credentials — be explicit.

MIME drives behaviour

Servers must send the right Content-Type. Browsers sniff but the spec says they shouldn’t — be explicit to avoid surprises.

Use Cases

When to look up TLDs

Domain shopping, branding, security awareness.

Naming research

Pick a TLD that matches your brand vibe. Bundled from IANA registries at build time — no live network call, no rate limit, no leaked queries. The MIME, TLD, and status-code tables are baked in so the tool works offline once loaded.

spec-compliant

HSTS-preload picks

Spot TLDs (.dev, .app, .page) that force HTTPS. Output is canonical per the relevant RFC (9110 for HTTP, 5322 for headers, 3986 for URLs), so spec-compliant parsers accept it as-is. Cross-browser and cross-library behaviour stays consistent.

offline

Compliance checks

.gov / .edu / .mil have eligibility requirements. Pairs with the curl-to-fetch converter for end-to-end test stubs — copy the curl from DevTools, paste, get an idiomatic fetch() body. Drop into Playwright/Vitest fixtures without manual translation.

IANA-backed

Phishing awareness

Spot suspicious ccTLDs used in scam links. Catches common pitfalls (uppercase header names, smart quotes inside Content-Type, missing ;charset=utf-8) before they bite production. Validation flags rather than auto-corrects so you stay in control.

RFC-aligned

Domain ecosystem

See how many TLDs your registrar might offer. Validation runs as you type — copy only when the output is shaped correctly. The output drops directly into nginx, Apache, or CDN configs without re-formatting or re-quoting.

production-grade

Global reach

Map ccTLDs to countries when localising. Same input plus same options always produces identical canonical output, so the tool is safe to embed in CI scripts that diff against expected configs.

i18n

FAQ

Frequently asked questions

Is this the complete IANA list?

No — it's a curated subset covering the common gTLDs and ccTLDs developers encounter. The full list has ~1,500 entries.

Why are .dev and .app marked HSTS?

Both are on the Chrome HSTS preload list at the TLD level — browsers refuse HTTP entirely for any domain under those TLDs.

Can I register any TLD?

Most are open. Sponsored TLDs (sTLD) like .gov, .edu, .mil have strict eligibility rules.

Does .io really mean British Indian Ocean Territory?

Yes — it's the country code for BIOT but is used worldwide for tech brands.

Does it run locally?

Yes. The dataset is bundled with the page — no network calls.

Suggest a tool

Something missing?

Tell us what you need. We ship the top requests every two weeks.

47 in queue·8 shipped this month

Request queued. Thanks!