The word domain in plain English means "area, region, or property"; on the internet, however, it has a much more specific meaning: the readable text you type into your browser's address bar to reach a website. Addresses like "example.com", "wikipedia.org" or "google.com" are essentially human-friendly aliases — beneath each one sits an IP address made up of numbers. This article goes well beyond the dictionary definition of "what does domain mean?" and walks you step by step through what a domain address is, how it works, the different types, how it gets registered and how it is technically resolved through DNS.
If you are new to the topic, this article alone is a solid starting point. If you want to dive deeper into how to buy a domain, run WHOIS lookups and understand the difference between.com and.com.tr, our existing comprehensive Domain Names guide will round things out. For readers who often confuse the difference between domain and hosting, our What Is Web Hosting article complements this one nicely.
Related guides: Domain Names, WHOIS Lookup · What Is DNS and How to Change Settings · Domain Lookup Tools (WHOIS/RDAP) · Hosting Types · Free SSL with Let's Encrypt
The Meaning of Domain: From Dictionary to the Internet
In English dictionaries the word domain carries meanings such as "area, field, sphere of influence, property, land". In mathematics it is the "domain of a function", in law a lord's "sphere of authority", in philosophy the "field" of a subject. In computing it shows up in three different contexts: the domain on a computer network (an Active Directory domain managed by a Windows Domain Controller), the domain of an area of expertise ("machine learning domain", "finance domain") and finally the most common one — the internet domain name.
The concept that has settled into Turkish as "alan adı" (domain name) was defined by the IETF in 1987 through RFC 1034 and RFC 1035. In other words, when we say "domain", we are talking about a 35+ year old naming system that still operates on the same fundamental architecture. The internet needed this system so that humans could navigate it; after all, there is a world of difference between memorising 142.250.190.78 and typing google.com.
What Is a Domain Address? A Practical Definition
A domain address is the human-readable portion of the URL that points to a web resource — the part representing the server. Let's break down "https://www.example.com/blog/what-does-domain-mean-turkish-guide" piece by piece:
https— the scheme (protocol). HTTPS is HTTP wrapped in TLS encryption. Modern browsers now flag plain HTTP as "not secure".www— subdomain. "www" is not mandatory; some sites use it as the canonical version, others don't.brandname— SLD (Second-Level Domain). The second-level domain that represents the brand, person or organisation.tr— TLD (Top-Level Domain). The top-level domain. Here it's the country code for Turkey (ccTLD)./blog/...— path. Points to a specific resource on the server; not part of the domain itself.
In everyday speech, "domain address" usually refers to the full domain name like "example.com". In a more technical context, "domain name" refers only to SLD+TLD, while "hostname" includes the subdomain too. A "Fully Qualified Domain Name" (FQDN) is the complete name including the trailing root dot: www.example.com. (the trailing dot points to the root of DNS).
Anatomy of a Domain Name: Root, TLD, SLD, Subdomain
DNS is a hierarchical, tree-shaped database. At the very top sits an invisible root zone ("."); under it are top-level domains (TLDs), then second-level, third-level and so on. It looks just like a family tree: ancestor at the top, branches below, individuals at the leaves.
. (root zone — invisible but present)
├── tr (TLD — Turkey ccTLD)
│ ├── com.tr (second level, for commercial entities)
│ │ └── brandname.com.tr
│ ├── org.tr
│ └── example.com <- SLD directly under TLD
│ ├── www.example.com (subdomain)
│ ├── blog.example.com (subdomain)
│ └── api.example.com (subdomain)
├── com (gTLD — generic Top-Level Domain)
│ ├── google.com
│ └── wikipedia.org (placed incorrectly here; actually under org TLD)
└── org
└── wikipedia.org
This hierarchy was not set up at random; ICANN (Internet Corporation for Assigned Names and Numbers) governs the root zone and the gTLDs. The.tr extension in Turkey was historically run by the Nic.tr unit at METU and, since 2018, has been managed by BTK (Information and Communication Technologies Authority) through the TRABIS system. So when you go to register a ".tr", at the end of the chain sits TRABIS.
TLD Categories: gTLD, ccTLD, sTLD, nTLD
Top-level domains (TLDs) fall roughly into four buckets. Each has its own registration policy, pricing model and target audience.
- gTLD (generic Top-Level Domain): open extensions like.com,.net,.org,.info,.biz. Most require no special documentation — first come, first served. More than 46% of all registered domains worldwide sit under.com.
- ccTLD (country code Top-Level Domain): two-letter country codes such as.tr,.uk,.de,.fr,.jp. They come from the ISO 3166-1 alpha-2 standard. Each is run by a national authority — TRABIS for.tr, Nominet for.uk, DENIC for.de.
- sTLD (sponsored Top-Level Domain): extensions reserved for specific communities like.gov,.edu,.museum,.mil. Documentation or approval is required (for example,.edu is restricted to accredited educational institutions).
- nTLD (new generic Top-Level Domain): the new wave of extensions opened up by ICANN since 2012 —.shop,.store,.tech,.blog,.app,.dev,.io,.ai and so on. A few (.io,.ai) are technically country codes but are used like gTLDs by the global tech community.
The "reputation" of an extension is not a real ranking factor in SEO; Google has stated this explicitly. User perception, however, is a different story: most users intuitively view.com as the "default", and may associate extensions like.xyz or.top with spam. If you are a Turkish business serving the local market, .com.tr or .tr is a clear trust signal.
The.tr Extensions in Turkey
Turkey's second-level.tr extensions are split by intended use. Since 14 September 2022, BTK has also opened up applications for direct.tr; previously only sub-categories like.com.tr and.org.tr were available.
.com.tr— for commercial entities. Documentation (tax certificate, trademark registration) is generally required..org.tr— for associations, foundations and non-profits..net.tr— for internet service providers and technical infrastructure companies..gov.tr— for government institutions only..edu.tr— for higher-education institutions approved by YÖK..bel.tr— for municipalities..k12.tr— for primary and secondary schools..av.tr— for lawyers (bar association registration required)..dr.tr— for medical doctors (medical chamber registration required)..tr— direct, single-level; opened to individuals and organisations after 2022.
The TRABIS portal of BTK (trabis.gov.tr) lists registry operators; an individual user does not register directly through TRABIS but rather through an accredited registrar. Major local providers in Turkey (Natro, İsimTescil, Turhost, Atak Domain and others) provide this registrar service.
What Happens Behind the Scenes? DNS Resolution
When you type "example.com" into your browser, what unfolds is a chain reaction completed in milliseconds. From the moment you hit "Enter" until the page begins rendering, the first 20-30% of the journey is spent on DNS resolution. Our What Is DNS, How to Change Settings article covers this topic in depth.
- 1) The browser first checks its own DNS cache. If you queried the same domain in the last few minutes, the answer is already there.
- 2) The OS-level DNS cache and
hostsfile are checked next. - 3) If still no answer, the query is sent to your ISP's recursive resolver (or one you configured, such as 1.1.1.1 / 8.8.8.8).
- 4) If the resolver doesn't know, it asks one of the root servers: "who is authoritative for.tr?"
- 5) The root points it to the.tr TLD servers. The resolver then asks them: "who is authoritative for example.com?"
- 6) The TLD server returns the domain's NS records (e.g. ns1.cloudflare.com, ns2.cloudflare.com).
- 7) The resolver asks those authoritative servers for the A/AAAA record, gets the IP and caches the result.
- 8) The IP is returned to the browser, which then opens a TCP+TLS handshake to the server.
# Manual DNS resolution trace — step by step with dig
dig +trace example.com
# Quick query through a specific resolver
dig @1.1.1.1 example.com A +short
# View authoritative name server records
dig example.com NS +short
# Query the AAAA (IPv6) record
dig example.com AAAA +short
# TTL and the full answer
dig example.com ANY
# Cross-platform query with nslookup (Windows/macOS)
nslookup -type=NS example.com 1.1.1.1
It pays to keep the distinction between domain and DNS clear: domain is the memorable name; DNS is the protocol and service that translates that name into an IP address. You buy the domain but can change DNS settings any time; if you switch hosting providers, the domain stays the same — you simply point the A/AAAA records at the new server.
DNS Record Types: A, AAAA, CNAME, MX, TXT and the Rest
Each domain has a zone file on its authoritative name servers. This file holds all routing information for the domain. The most common record types are:
- A — Maps the domain to an IPv4 address (e.g. 203.0.113.10).
- AAAA — Maps to an IPv6 address (e.g. 2606:4700::1111). Pronounced "Quad-A".
- CNAME — An alias. Redirects "www.example.com" -> "example.com" or to another name. CNAME cannot be set on the apex domain; ALIAS/ANAME is used for that.
- MX — Mail Exchange. Which servers accept email for this domain? Sorted by priority.
- TXT — Free-form text. SPF, DKIM, DMARC, domain verification records and Google Search Console verification all go here.
- NS — The authoritative name servers for the domain.
- SOA — Start of Authority. The zone's "primary" record; carries the serial number, refresh and expire values.
- CAA — Specifies which Certificate Authorities are allowed to issue certificates for the domain (use
letsencrypt.orgas the CAA value for Let's Encrypt). - SRV — Host+port for specific services (SIP, XMPP, Minecraft, Matrix, etc.).
- PTR — Reverse DNS. IP address -> domain. Critical for mail server reputation.
; BIND zone file example — example.com
$TTL 3600
@ IN SOA ns1.example.tr. hostmaster.example.com. (
2026010301 ; serial (YYYYMMDDNN)
7200 ; refresh (2h)
3600 ; retry (1h)
1209600 ; expire (14d)
300 ) ; minimum ttl
@ IN NS ns1.example.tr.
@ IN NS ns2.example.tr.
@ IN A 203.0.113.10
@ IN AAAA 2001:db8::10
www IN CNAME @
blog IN A 203.0.113.11
api IN A 203.0.113.12
@ IN MX 10 mail.example.com.
mail IN A 203.0.113.20
; SPF + DMARC + DKIM
@ IN TXT "v=spf1 mx include:_spf.example.tr -all"
_dmarc IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com"
; CAA — only Let's Encrypt may issue certificates
@ IN CAA 0 issue "letsencrypt.org"
WHOIS, RDAP and Domain Ownership
To see who a domain is registered to, when it was registered, when it expires and which name servers it uses, the WHOIS protocol is used. WHOIS is an old TCP protocol (port 43) that has been around since 1982. Since 2015 it has gradually been giving way to RDAP (Registration Data Access Protocol); RDAP is modern, returns JSON and applies GDPR-friendly redaction.
# WHOIS query — Linux/macOS
whois example.com
# Query a specific WHOIS server
whois -h whois.nic.tr example.com
# RDAP — modern alternative (HTTPS + JSON)
curl -s https://rdap.org/domain/example.com | jq.
# Find the authoritative RDAP service for a TLD via IANA
curl -s https://data.iana.org/rdap/dns.json | jq '.services[] | select(.[0][] == "tr")'
Following GDPR (2018) and the Turkish KVKK, personal information in WHOIS data is largely redacted; email and phone show up as "REDACTED FOR PRIVACY". Registrars also reinforce this with their own "WHOIS privacy" products. For more detail, see our Domain Lookup Tools article.
Domain Registration: Registering, Renewing, Transferring
"Buying" a domain is really leasing the right to use it for a set period. Per ICANN policy, gTLDs can be registered for 1-10 years;.tr extensions usually go year by year. If you don't renew when the term ends, the domain enters an auto-renew grace period (typically 30-45 days), then a redemption period (30 days, where renewal fees jump several times higher), and finally pending delete (5 days). After that it becomes available to register again.
- Registry — The organisation managing the TLD (e.g. Verisign for.com, TRABIS for.tr).
- Registrar — The ICANN-accredited intermediary that sells to end users.
- Reseller — A reseller of a registrar.
- Registrant — The natural or legal person obtaining the right to use the domain (you).
- EPP / Auth Code — The authorisation code required to transfer the domain to another registrar.
- Registry Lock / Transfer Lock — A lock that prevents unauthorised transfers. A must-have for high-value brands.
Domain Pricing: Approximate 2026 Ranges
The figures below are approximate, varying by provider and exchange rates; they reflect early-2026 average annual registration prices in the Turkish market. Keep in mind that renewal pricing often differs from first-year promotions — this is the most-overlooked detail for newcomers:
- .com — roughly $9-15 USD/year. ICANN fees and registry price increases can push renewals up 5-10%.
- .net — roughly $10-18 USD/year.
- .org — roughly $11-20 USD/year.
- .tr (direct) — around ₺200-400 / year, the entire fee going to TRABIS.
- .com.tr — around ₺150-350 / year, but documentation is required.
- .io — roughly $35-55 USD/year. Pricing skews high because of its popularity in tech.
- .ai — roughly $90-140 USD/year, usually with a mandatory two-year registration.
- .shop /.store — roughly $20-50 USD/year; renewal can jump significantly.
- .xyz — roughly $1-8 USD/year (deliberately positioned as a budget extension).
- Premium domains — priced individually by the registry; one-time fees can run into the tens of thousands of dollars.
Beware of the cheap-first-year, expensive-renewal trap. The "$0.99 first year!" ad often becomes $25 the second year. Always check the renewal price before deciding.
Domain or Hosting? They Are Not the Same Thing
These two are the most-confused concepts. A simple analogy: domain is your house's address, while hosting is the house itself. Without an address there is no mail; without a house there is nowhere to live. To put a website live you need both — or at least a domain plus an application server. For a side-by-side look at hosting types, our What Is Web Hosting article lays them all out; if you need a more powerful solution, our What Is VPS article covers the VPS / VDS comparison.
- A domain is registered once and renewed annually; you can transfer it to another registrar whenever you want.
- Hosting is rented monthly or yearly, priced by server resources, disk, RAM and traffic.
- It's perfectly normal to buy a domain from one provider and hosting from another.
- With DNS settings you can point the domain at any hosting server you choose.
How to Pick the Right Domain: Practical Rules
Choosing a domain decides the brand you'll carry for years; don't make the call under pressure. The checklist below collects rules proven across thousands of registrations.
- Keep it short — 6-14 characters is ideal. 20+ characters hurts memorability and increases typos.
- Make it pronounceable — a name you can say in a coffee chat will also work on a podcast.
- Avoid hyphens — "my-brand.com" is hard to remember; in spoken communication you have to spell out "hyphen".
- Don't use digits — "4u" and "for you" get confused; SEO sees it as inconsistent too.
- Watch for trademark conflicts — check the TPMK (Turkish Patent and Trademark Office) along with USPTO/EUIPO databases.
- Social media consistency — is the same handle available on X, Instagram and LinkedIn?
- Phonetic fit — a string of "qwxz" might look great internationally but feel awkward locally.
- Ideal extension —.com.tr or.tr for a local audience;.com (if available) for global reach.
- Trademark risk — buying a domain that contains someone else's registered trademark can land you in a UDRP dispute.
If your brand name isn't finalised yet, thinking about availability alongside naming saves both time and money; picking a popular name only to find the.com is taken can get expensive. You can use our WHOIS Lookup tool and DNS Lookup tool during the selection process.
IDN: Domains with Turkish Characters
Domains containing characters like "Ş, Ğ, Ü, İ, Ö, Ç" are technically called IDNs (Internationalized Domain Names). They are defined by RFC 3490/5890. At the browser and DNS layer they are converted into ASCII through an encoding called Punycode.
# IDN examples
şahane.com.tr -> xn--ahane-pta.com.tr
güzel.tr -> xn--gzel-vra.tr
çilek.com -> xn--ilek-9wa.com
# Convert from the command line — Python
python3 -c "print('şahane'.encode('idna').decode())"
# output: xn--ahane-pta
# Node.js
node -e "console.log(require('punycode').toASCII('güzel'))"
IDNs have two practical issues: (1) some legacy email systems can't handle IDN MX records, and (2) the homograph attack — using a Cyrillic "а" instead of a Latin "a" makes phishing easier. Browsers display these addresses in xn-- form when they detect such mixing. In general, IDNs can look charming for a local-market brand, but for a tech-driven or internationally communicating business, ASCII is the safer choice.
Subdomains: The api., blog., shop. Strategy
A subdomain is an extra layer added under a domain: "blog.example.com", "api.example.com". They are free; you don't get them from a registrar but manage them in your own DNS panel. From an SEO standpoint, Google tends to treat a subdomain as an independent site; if you want to consolidate the content ecosystem, a subdirectory like "example.com/blog" is a common strategy.
- www. — the historical subdomain. Not required in modern setups; lock down your canonical preference with a 301 redirect.
- api. — the REST/GraphQL API endpoint. Makes it easy to keep CORS and rate limits separate. Pair this with our REST API Security Guide.
- cdn. or static. — for static files. Kept on a separate domain from the main site for cookie-less serving.
- mail. — webmail or MX target.
- m. — once used for the mobile version. Made redundant by responsive design.
- status. — uptime page (usually hosted on a third-party provider).
- dev., staging., preview. — development environments (always behind noindex / robots protection).
Domain and SSL: There's No Site Without HTTPS Anymore
After registering a domain and pointing DNS, the next standard step is installing an SSL/TLS certificate. Modern browsers mark plain HTTP as dangerous; HTTPS is a small but real factor in Google's ranking signals. Let's Encrypt offers free certificates valid for 90 days, automatically renewed via cron or systemd timer. For the details, our Free SSL with Let's Encrypt and HTTPS and TLS 1.3 articles offer a clear starting point.
# Let's Encrypt certificate via certbot — Nginx
sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d example.com -d www.example.com
# Wildcard certificate (requires DNS-01 challenge)
sudo certbot certonly --manual --preferred-challenges dns \
-d "*.example.com" -d example.com
# Test automatic renewal
sudo certbot renew --dry-run
# Inspect certificate validity from the command line
echo | openssl s_client -servername example.com -connect example.com:443 2>/dev/null \
| openssl x509 -noout -dates -subject -issuer
The Domain Transfer Process
When you want to move a domain from one registrar to another, the standard procedure is as follows:
- 1) Disable the transfer lock (Registrar Lock) in your current registrar's panel.
- 2) Obtain the EPP / Auth Code.
- 3) Make sure the admin email in WHOIS is reachable (the confirmation email lands there).
- 4) Start the "Transfer" workflow at the new registrar, enter the EPP code and pay the fee (a transfer usually includes a 1-year extension).
- 5) The old registrar sends a confirmation email; click to speed it up. Per ICANN policy, if not denied, the transfer auto-completes within 5 days.
- 6) If you notice your DNS records didn't move with the transfer, copy the zone file from the old account to the new name servers.
- 7) Don't forget the 60-day transfer lock: after a new registration or transfer, no further transfers can occur for 60 days.
For.tr extensions the process is slightly different: it takes coordination between two registry operators through the TRABIS system, and users typically have to confirm via SMS or an e-signed document.
Domain Security: Hijacking Scenarios
Domain hijacking is when a malicious party takes over your registrar panel and changes the name server records. The result: visitors land on a fake site, your emails get forwarded to the attacker, and the brand collapses. The mandatory measures the markaadi team requires in customer contracts include:
- Enable 2FA / MFA — TOTP or a FIDO2 key on the registrar panel.
- Registry Lock — for high-value domains. Changes require manual approval.
- Separate WHOIS email account — not a personal Gmail, but a corporate, MFA-protected address.
- DNSSEC enabled — prevents manipulation of DNS responses.
- CAA record — unauthorised CAs cannot issue certificates.
- Renewal alarm — if your card expires and auto-renew fails, the domain can drop.
- Limit privileged users — "everyone has access" on a small team is an invitation to disaster.
- Enable WHOIS privacy — exposed contact details invite spam and social engineering.
Domain security follows the same logic as OWASP Top 10 2026: the weakest link is the user side. For deeper hardening, our VPS Security Hardening and JWT Security articles will be helpful.
DNSSEC: Verifying the Integrity of Resolution
DNSSEC (DNS Security Extensions) signs DNS responses to defend against "man-in-the-middle" attacks. The resolver can verify that the answer it received really came from the authoritative server and was not tampered with. It is defined by RFCs 4033/4034/4035.
# Check DNSSEC status
dig +dnssec example.com | grep -E "^(;; flags|RRSIG|DS|DNSKEY)"
# Query with validation (we expect the AD flag from a recursive resolver)
dig +adflag +dnssec example.com
# Visual validation in the style of DNSViz
# manual test via https://dnsviz.net/d/example.com/dnssec/
DNSSEC's only downside is that it makes record management a bit more complex; a misconfiguration can take the entire site offline. Major managed DNS providers like Cloudflare, Google Cloud DNS and Route 53 enable DNSSEC with one click.
Domain and Email: SPF, DKIM, DMARC
The most-forgotten side of a domain is email. If you are sending mail from your domain (like info@example.com), three DNS records are essential to get past spam filters: SPF, DKIM, DMARC. Without them, Gmail and Outlook may drop your messages straight into junk.
; SPF — servers allowed to send mail on behalf of this domain
example.com. IN TXT "v=spf1 mx include:_spf.google.com ~all"
; DKIM — server signs messages; recipient verifies with the public key
selector1._domainkey.example.com. IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSI..."
; DMARC — what to do when SPF/DKIM fails + reporting
_dmarc.example.com. IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com; pct=100"
DMARC is initially set to passive monitoring with p=none, the reports are reviewed, then it's stepped up to quarantine and finally reject. Skipping two of these three steps can leave legitimate emails lost in transit.
Domain Investing: Domaining
A group of investors register names they like in bulk and resell them years later at a high price. This is called domaining. Generic, short, brandable names are gold here; "voice.com" sold for $30 million, "insurance.com" for $35.6 million. The market in Turkey is smaller in scale, but generic names like "kahve.com.tr" or "yatirim.tr" occasionally change hands at five-figure sums.
- Aftermarkets: Sedo, Afternic, Dan, Namecheap Marketplace, and domainfor.com.tr in Turkey.
- Backorder / Drop catching: services that automatically catch domains the moment they expire.
- Brandable domains: meaningless yet memorable names like "Zalando, Spotify, Hulu".
- UDRP risk: holding a domain that resembles someone else's registered trademark in order to profit is grounds for losing it under the law.
AI and Domain Name Generation
In recent years LLM-based domain suggestion tools have become widespread; you tell it "I'm in this industry and I like these words" and it spits out thousands of creative combinations. They are a useful starting point, but always run them through a manual filter: trademark conflicts, awkward phonetics and national-cultural connotations are exactly the kinds of issues automated tools miss.
A practical workflow for generating domain ideas: (1) thematic word cluster (Turkish + English synonyms), (2) combinations and abbreviations, (3) WHOIS availability check, (4) trademark database query, (5) social media reservation, (6) speak it out loud ("hi, this is mysite.com.tr" — does it work over the phone?), (7) final decision and registration.
SEO and Domain: Myth vs Reality
Plenty of myths circulate around the SEO impact of a domain. Google's official position and real-world observation can be summed up as follows:
- Exact-match domain (EMD) — domains that include the keyword like "cheapshoes.com" lost value with Google's 2012 EMD update. There's still a small signal, but with no quality content behind it, the advantage is zero.
- Domain age — staying active for years builds trust; but "domain age" is not a factor on its own. What matters is years of quality content on that domain.
- TLD and geo targeting —.com.tr or.tr automatically targets Turkey in Search Console; for.com, the "International Targeting" setting has to be configured manually.
- HTTPS — a small ranking signal; in practice, mandatory.
- Subdomain vs subdirectory — Google treats them as equal; in practice, authority builds up more easily on the subdirectory side.
- Same content on multiple TLDs — duplicate content risk. Without correctly configured hreflang and canonical, you penalise yourself.
For ranking fundamentals, our How Search Engines Work and Technical SEO Checklist 2026 articles are complementary resources.
Working with Domains on the Command Line
Examples from an engineer's daily toolkit. To dump every record of a domain in seconds, check its certificate or measure response times, we reach for these commands:
# Query all common record types in one go
for t in A AAAA NS MX TXT CAA SOA; do
echo "=== $t ===";
dig +noall +answer example.com $t;
done
# Measure DNS response time (resolver comparison)
for r in 1.1.1.1 8.8.8.8 9.9.9.9 208.67.222.222; do
echo -n "$r: ";
dig @"$r" example.com +stats | grep "Query time";
done
# HTTP response headers + redirect chain
curl -sIL https://example.com | grep -E "HTTP|Location|Server"
# List the certificate's SANs (alternative domains)
openssl s_client -servername example.com -connect example.com:443 < /dev/null 2>/dev/null \
| openssl x509 -noout -ext subjectAltName
# Reverse DNS check (critical for mail servers)
host 203.0.113.10
# DNS propagation check (worldwide)
# verify via dnschecker.org or whatsmydns.net
# Windows PowerShell — Resolve-DnsName
Resolve-DnsName example.com -Type A
Resolve-DnsName example.com -Type MX
Resolve-DnsName example.com -Server 1.1.1.1
# All record types at once
@('A','AAAA','NS','MX','TXT','SOA','CAA') | ForEach-Object {
Write-Host "=== $_ ===" -ForegroundColor Cyan;
Resolve-DnsName example.com -Type $_ -ErrorAction SilentlyContinue
}
# Certificate inspection
$req = [Net.HttpWebRequest]::Create('https://example.com')
$req.GetResponse() | Out-Null
$cert = $req.ServicePoint.Certificate
$cert | Format-List Subject, Issuer, NotAfter
Programmatic Domain Lookups
If you're writing automation, both Node.js and Python ship with built-in DNS libraries. The examples below pull A records in parallel for a list of domains.
# Python — dnspython
import dns.resolver
import concurrent.futures
def resolve(domain):
try:
answers = dns.resolver.resolve(domain, 'A')
return domain, [r.to_text() for r in answers]
except Exception as e:
return domain, f"error: {e}"
domains = ['example.com', 'github.com', 'wikipedia.org', 'cloudflare.com']
with concurrent.futures.ThreadPoolExecutor(max_workers=8) as ex:
for domain, result in ex.map(resolve, domains):
print(f"{domain:25} {result}")
// Node.js — built-in dns/promises
import { promises as dns } from 'node:dns';
const domains = ['example.com', 'github.com', 'wikipedia.org', 'cloudflare.com'];
const results = await Promise.all(
domains.map(async (d) => {
try {
const records = await dns.resolve4(d);
return { domain: d, ips: records };
} catch (err) {
return { domain: d, error: err.code };
}
})
);
console.table(results);
Programmatic Registration Data via WHOIS API
Most major registrars and RDAP providers offer JSON-returning REST APIs. If you want to show users on an e-commerce site whether a domain they entered is available in real time:
// rdap.org sample response (truncated)
{
"objectClassName": "domain",
"handle": "D...",
"ldhName": "example.com",
"status": ["active", "client transfer prohibited"],
"events": [
{ "eventAction": "registration", "eventDate": "2024-03-12T10:14:00Z" },
{ "eventAction": "expiration", "eventDate": "2027-03-12T10:14:00Z" }
],
"nameservers": [
{ "ldhName": "ns1.cloudflare.com" },
{ "ldhName": "ns2.cloudflare.com" }
],
"secureDNS": { "delegationSigned": true }
}
For bulk lookups the RDAP service applies rate limits; build a simple caching layer on your side too (Redis with a 24-hour TTL is ideal). For caching strategies, our What Is Redis article will be useful.
The Life of a Domain: From Registration to Expiry
A typical gTLD domain goes through these stages over its life cycle:
- Available — not registered, anyone can claim it.
- Active / Registered — has an owner. Standard usage until the term ends.
- Expired — term ended but the registrant still has control; the page may be unreachable.
- Auto-Renew Grace Period — 0-45 days. No extra fee to renew.
- Redemption Period — 30 days. Renewal is possible but with a "redemption fee" added; typically $80-150 USD.
- Pending Delete — 5 days. Cannot be reclaimed; ends in the registry's pool.
- Released — back to anyone-can-register state. Investors using "drop catch" services keep watch for this moment.
The process is slightly different on.tr extensions; per TRABIS policy, the grace period is generally 30 days, followed by a "redemption"-like 30-day phase, after which it drops.
The Most Common Domain Mistakes
- Not thinking about the domain before the brand name — picking the brand first only to find the domain is taken means starting over.
- Cheap first year, pricey renewal — don't be misled by the headline price; check the renewal figure.
- Auto-renew turned off — card expires, the reminder email lands in spam, and the domain disappears.
- Outdated WHOIS email — the confirmation arrives, no one reads it, the transfer is cancelled.
- Not registering multiple extensions — as your brand grows, defensively holding similar extensions (com, net, com.tr) pays off.
- Hyphenated and lengthy names — a nightmare in spoken communication.
- Trademark conflict — a domain containing someone else's brand can be taken away for free in a UDRP case.
- Pushing DNS changes without testing — dropping the TTL to 60 seconds, testing, then raising it back is professional practice.
- No 2FA — a single social engineering attack hands over the registrar panel and the brand vanishes.
- DNSSEC misconfiguration — one bad record makes the domain unreachable globally.
Frequently Asked Questions About Domains
Are "domain" and "alan adı" the same thing?
Yes. "Domain" is the English term, "alan adı" is the Turkish equivalent. In technical documentation both refer to the same concept.
Is buying a domain ownership or renting?
In practice, renting. Per ICANN policy, domains are registered for 1-10 years; if you don't renew when the term ends, the domain becomes available to someone else. But "it doesn't drop the day it expires" — the grace period safety net described above is in place.
Can I get a domain for life?
Not directly. Some registrars offer a "lifetime" package — in practice, this is a prepaid subscription where they renew on your behalf each year. The registration itself is still annual.
What happens when I sell my domain?
The buyer pays, an escrow service (such as Escrow.com) holds the funds, the EPP code is shared, the transfer completes, and escrow releases the money to the seller. Skipping escrow on high-value transactions is a classic fraud vector.
Should I get a domain with Turkish characters?
It can work for a memorable, locally focused brand. But technical users find Punycode conversion annoying, and there can be sporadic incompatibilities with email servers. The safest path is usually to also register the ASCII equivalent as a backup.
Can I get a domain for free?
There is no truly free real domain — pseudo-free extensions like Freenom (.tk,.ml,.ga,.cf,.gq) provided unreliable service for years and have largely fallen out of use. For a serious project, plan to spend roughly $8-20 USD per year.
Are subdomains paid?
No. Once you register a domain, you can create as many subdomains as you want from your DNS panel. Subdomains live under the domain and require no additional registration fee.
Does my domain redirect to a different city, or does hosting?
Routing is a DNS setting. The domain is an address; the A/AAAA records dictate which server (and therefore which city/datacenter) responds. If you switch servers, just changing the IP in DNS is enough.
Notes on Local Providers in Turkey
Looking at the local market, long-running independent providers in Turkey (Natro, Turhost, İsimTescil, Atak Domain, GuzelHosting and others) sit alongside international players (GoDaddy, Namecheap, Cloudflare Registrar). The criteria to check when choosing are standard: ICANN/TRABIS accreditation, control panel quality, ease of transfer, real (human) support, WHOIS privacy and 2FA support. We won't single out one local provider — competition in the market has driven the average quality up significantly over the years.
Domains and Trademark Rights
Buying a domain does not equal trademark registration; the reverse is also true. If you have a registered trademark, you can reclaim a conflicting domain registered by someone else through UDRP, or through TRABIS's dispute resolution procedure for.tr. Without a registered trademark, you may not be able to protect your name. We continually advise clients to follow this order: decide on the brand word, check trademark availability with TPMK, register the domain, and file the trademark application in parallel. Working all three together brings the risk close to zero.
Summary: Answering "What Does Domain Mean?"
In one sentence: a domain is the user-friendly name within a hierarchical naming system that lets you reach an internet resource — it maps onto an IP address. The Turkish word for it is "alan adı". In the technical world, this short term sits at the foundation of dozens of layers — from the memorability of websites to brand identity, from email deliverability to SEO. When you see "example.com", what your brain ties to a single word is in fact a resolution chain that runs from the top of the DNS hierarchy across the entire planet.
This article aimed to bring all the components of the domain concept together and present the technical reality to readers in one place. Practical advice for the next steps: pick a domain, check WHOIS availability, register it through an accredited registrar, enable 2FA, keep DNSSEC active, install SSL, and configure MX records for your email. This checklist captures the path from a domain merely "existing" to being "professionally operated".
Further Reading
- Domain Names, WHOIS Lookup, Domain Registration
- Domain Lookup Tools: WHOIS, RDAP and DNS
- What Is DNS, How to Change Settings
- What Is Web Hosting, Types and How to Choose
- What Is VPS, the VDS Difference and Hiring Guide
- Free SSL Setup with Let's Encrypt
- HTTPS and TLS 1.3 Guide
- Technical SEO Checklist 2026
- ICANN — Internet Corporation for Assigned Names and Numbers
- IANA Root Zone Database
- BTK TRABIS —.tr domain names
- RFC 1035 — Domain Names Implementation
- RFC 7480 — RDAP HTTP Usage
- RFC 4033 — DNS Security Introduction
For end-to-end help with domain registration, DNS planning, DNSSEC setup, SPF/DKIM/DMARC email configuration and transfers, please contact our team