How many domain extensions are there?
There are 1,437 top-level domains in the root zone. Of those, 1,351 are signed with DNSSEC, and we can look up registration data for 1,306. The table was last refreshed on October 14, 2026, from root zone list version 2026101300.
What do the domain extension types mean?
The type is IANA's label for how an ending is run, and it hints at who can register under it.
| Type | What it is |
|---|---|
| generic | Most endings, such as .com and .xyz. Most arrived from 2013 on, through ICANN's New gTLD Program. Brand endings, such as .bmw, are used only by their owner. |
| country-code | Two-letter endings for a country or territory, such as .uk, plus versions in other scripts, such as .中国, shown with their xn-- form. Each sets its own rules. |
| sponsored | Endings for one community, such as .edu and .gov, often with eligibility rules. |
| generic-restricted | Older generic endings that launched with limits on who could register, such as .biz and .pro. |
| infrastructure | .arpa, used for reverse DNS. You can't register a name under it. |
Why can't some domain extensions be looked up?
Our domain tools ask each ending's registry over RDAP when it offers it, and over WHOIS when it doesn't. A few registries offer neither in a form we can use. The Lookups column shows where each ending stands.
| Lookups | What it means |
|---|---|
| Yes | The registry is in IANA's RDAP directory. |
| Via our own list | The registry runs RDAP but isn't in IANA's directory. We added it after testing it with a real domain. The name under the label runs the service. |
| Via WHOIS | The registry has no RDAP service we know of, so we read its WHOIS server. We added it after testing it with a real domain and a made-up one. WHOIS text can leave out fields that RDAP would show. |
| Cannot check | We know of no RDAP service, and the WHOIS server is missing or didn't pass our tests. Our lookup and availability tools can't answer for this ending. |
A "Cannot check" ending may still have a lookup on the registry's website. Its page in IANA's root zone database links to it. Domain lookup explains how RDAP and WHOIS differ.
Does a signed extension mean my domain uses DNSSEC?
No. "Signed" means the ending itself has a DS record in the root zone, so domains under it can use DNSSEC. Each domain still needs to be signed by its DNS host, with its own DS record added through the registrar. To check one domain, use the DNSSEC checker.
Where does this data come from?
- Type and operator: IANA's root zone database.
- DNSSEC: DS records in the root zone file.
- Lookups: IANA's RDAP directory, the RDAP services we added by hand, and WHOIS servers listed in IANA's root zone database that passed our tests.
A script rebuilds the table from these sources. If a source changes shape, the script stops instead of saving a partial list.
Why aren't domain prices listed?
Prices change too often to keep right here. They vary by registrar, by promotion, and by whether the name is premium, so check at a registrar before you buy, and check the renewal price too.
How do I check a name under one of these endings?
Use the domain availability checker for one name, or multi-TLD availability to try one name across many endings. For a registered domain's registrar, dates, and status codes, use domain lookup.