.buy

Generic top-level domain

Register: —first year
Renew: —a year
Transfer: —to move it
Registrars: —quoting it
Lookup: RDAPanswers for it
DNSSEC: Signed1 DS record in the root
Level: Secondmybrand.buy

Check a name

One command, straight against the registry — no account, no page to load.

Name

Fills the command and the registrar links below in with your own name. The page is static — nothing is looked up here, and nothing you type leaves the browser.

ds mybrand --tld buy

Add --where for the registrars and the registry's rules, --registry for the server that answered, or --all-info for everything at once.

What it costs

No registrar in the price table bundled with ds quotes .buy, so the CLI prints no figure beside it — one of 927 such TLDs. That is a gap in the table as often as it is a TLD nobody sells. See Prices for supplying your own table with --pricing-file.

Who can register

No eligibility rule is on file for .buy, which is not the same as a promise that it is open: the list is hand-maintained and covers the restricted TLDs a registrar is likely to offer you. Check the registry's own page before counting on a name. 81 TLDs do carry a rule — see Who can register.

How `ds` answers for it

RDAP first, WHOIS second — the same order for every TLD. .buy has an RDAP service and no WHOIS entry, so every answer is authoritative RDAP.

RDAP: https://rdap.nominet.uk/buyFrom IANA's bootstrap, refreshed when this page was built. The lookup is https://rdap.nominet.uk/buy/domain/mybrand.buy — a 404 means the name is free.

ds mybrand --tld buy --registry prints whichever of these answered. If a bundled WHOIS host has gone stale, IANA is asked who serves .buy today. See Accuracy notes.

The registry

From IANA's delegation record for .buy. .buy is a generic TLD.

Run by: Amazon Registry Services, INCBased in United States of America. ICANN records the contracted registry operator as Amazon Registry Services, Inc. Delegated 2015-11-20, record last updated 2025-02-14.
Registry site: www.nic.buyWhere the registry documents .buy — its rules, its accredited registrars, and any launch phases. Not a shop: registries sell wholesale to registrars, not to you.
Published services: rdap.nominet.ukWhat the registry itself tells IANA it runs. They agree with what ds asks.
Name servers: dns1.nic.buydns2.nic.buydns3.nic.buydns4.nic.buydnsa.nic.buydnsb.nic.buydnsc.nic.buydnsd.nic.buyThe 8 authoritative servers for the .buy zone — what the root delegates to. Nothing ds queries directly; they are what makes a registered name resolve.

What it is

Derived from the root zone and ICANN's registry list — each one is a fact with a source.

generic IANA Root Zone Database types it "generic"
new-gtld ICANN delegated it on or after 2013-10-23, when the 2013 round opened — see delegated

What it is for

Our reading, not a fact — nothing in the root zone says what a TLD means. Hand-maintained in tld-categories.json.

Shopping & Deals Retail, marketplaces, discounts, and gifts.

In the root zone

The delegation itself, read out of the root zone — serial 2026090900, on 2026-09-09. The registry section above is IANA's record of what .buy was delegated to; this is what the root actually answers with when a resolver asks it where .buy lives.

Delegated to: dns1.nic.buy213.248.218.622a01:618:402::62
dns2.nic.buy103.49.82.622401:fd80:402::62
dns3.nic.buy213.248.222.622a01:618:406::62
dns4.nic.buy43.230.50.622401:fd80:406::62
dnsa.nic.buy156.154.100.32001:502:ad09::3
dnsb.nic.buy156.154.101.32001:502:2eda::3
dnsc.nic.buy156.154.102.32610:a1:1009::3
dnsd.nic.buy156.154.103.32610:a1:1010::3
The 8 name servers the root hands out for .buy, with the glue addresses that come with them — every one of them answers over IPv6. None of this is what ds queries: these servers know which names exist, not who registered them.
DNSSEC: Signed — 1 DS record in the root
key 16411RSA/SHA-256 · SHA-256C9C2D0F38695BCF73FE5C6FE4A049282848F45F887C4C72B337BCA9FB50ABC33
Each one is a fingerprint of .buy's own signing key, published by the root and signed with the root's key — which is how a resolver that trusts only one key can prove an answer under .buy came from its registry and was not tampered with in transit. It says nothing about who owns a name or whether one is free.

Ask the root yourself — no registry involved, and the same records this section was built from: dig +norec @a.root-servers.net buy. NS and dig +norec @a.root-servers.net buy. DS.