Where to buy .com domains: registrars vs. brokers.

There are exactly three places a .com domain can come from, and confusing them is the most expensive mistake founders make. Each channel has a different price discovery mechanism, a different fee structure, and a different set of names it can deliver. Unlike newer TLDs, .com has been near-fully registered since the early 2000s — which means channel #1 almost never applies to anything you'd actually want as a brand.

1. Registrars (Namecheap, GoDaddy, Cloudflare, Porkbun, Squarespace Domains, Name.com) sell .coms that nobody currently owns at a fixed retail price — typically $10–$15 per year. If the .com is somehow free, this is where you go. In 2026 that's basically only true for long, awkward, or hyphenated names.
2. Aftermarket marketplaces (Sedo, Afternic, Dan, GoDaddy Auctions, Atom by Squadhelp) list .coms that owners have voluntarily put up for sale at a stated price. Listed premium .coms typically sit at $2K–$500K, but listing prices are an opening anchor — most owners will accept 30–60% less if you negotiate. The fee is built into the price; the platform takes 10–20% from the seller.
3. Buy-side brokers acquire .coms on your behalf from owners who haven't listed the name for sale. They reach the owner anonymously, anchor against comparable closed sales, run escrow, and charge a success fee (typically 10–15% of the closed price, no upfront retainer on real deals). Every category-defining .com you can name — Stripe, Notion, Linear, Figma, OpenAI's eventual ChatGPT.com — was acquired off-market through a broker.

The simplest test: search the name at a registrar. If it's free, register it. If it's listed on Sedo or Afternic at a price you'd happily pay, buy it. Otherwise, the name is owned by someone who hasn't publicly priced it — and for .com, that's the default case. Welcome to broker territory.

Registrars are commodity infrastructure. They sell you a one-to-ten-year lease on a .com, handle the ICANN/Verisign paperwork, and let you point DNS wherever you want. The wholesale price of every .com is set by Verisign (the .com registry operator) at ~$10.26/yr in 2026, so the retail spread between registrars is small and renewal-driven.

What does matter: renewal pricing (GoDaddy and Squarespace use low first-year teasers then jack renewals), transfer fees and ICANN compliance (a .com you might want to move to a corporate registrar like MarkMonitor later), and registry lock support (a non-negotiable for any .com worth more than mid-five-figures — without it, a compromised email can lose you the domain).

Our default order of preference for new .com registrations: Cloudflare (at-cost renewals at ~$10.44, no upsells), Porkbun (clean UX, free WHOIS privacy, founder-friendly), Namecheap (everyone has used it, support is competent, transfer-friendly). For anything you intend to hold long-term and lock down properly, MarkMonitor or CSC Global are the corporate-grade options — expensive, but the only registrars that offer real registry lock and human-verified transfer protocols.

Avoid GoDaddy as a long-term home unless you're already there — renewals are 2–3x the floor, the upsell flow is hostile, and migrating off after a few years of auto-renew is an afternoon you don't need to spend. (That said, GoDaddy owns Afternic, so you'll often buy aftermarket .coms with GoDaddy in the middle of the transaction even if you never want them as your registrar.)

What registrars cannot do: get you a .com someone else already owns. Their search box will say "taken" and the journey ends there. For .com, that's almost every search you'll ever run.

Aftermarket platforms are a useful first stop for any .com you're considering, even ones you ultimately won't buy there. The listed price tells you the seller's opening anchor, which is a real datapoint even if you eventually approach them off-platform. Search the name on Afternic, Sedo, and Dan in that order — those are the three liquid .com marketplaces in 2026, with Afternic carrying the most inventory by a wide margin because of its GoDaddy distribution network.

How aftermarket pricing actually works. A listing price on Afternic or Sedo is the seller's wish number, not the clearing price. Roughly 80% of listed premium .coms have an acceptable range 30–60% below the sticker. The platforms also run "make offer" listings where there's no displayed price — those are pure negotiation, and the seller usually has a number in mind that's a function of recent NameBio comps in the same syllable count and category.

The hidden tax: identity disclosure. When you submit an offer through Afternic or Sedo, the seller can usually see your account, your email domain, and (if the platform shares it) your registered company. Aftermarket offers from [email protected] get the same 3–10x markup as direct outreach. Either set up an anonymous account before you negotiate, or use a broker. This matters more on .com than on any other TLD because .com sellers are sophisticated — many are professional domainers with software that auto-Googles every inbound buyer.

When aftermarket is the right channel for .com. Three cases. (1) The listed buy-it-now price is acceptable — just click buy. (2) You're targeting a long-tail two- or three-word .com that's listed under $25K and you don't mind paying retail. (3) You want to know what the seller wants before deciding whether to engage a broker for the same name.

The Afternic / GoDaddy distribution quirk. Many premium .coms are listed at Afternic but appear with buy-now prices inside the search results of dozens of registrars — Namecheap, Network Solutions, 101domain, even Google search snippets. The price is the same everywhere; the seller just opted into Afternic's distribution network. Don't waste time price-shopping across registrar storefronts for a syndicated Afternic listing.

Once you cross the line into premium .com — one-word brandables, short category names, anything you'd put on a Series A deck — almost every transaction goes through a buy-side broker. Not because brokers are gatekeepers, but because the five jobs they do are jobs you cannot do yourself once your name is on Crunchbase or LinkedIn.

1. Anonymity. Outreach goes from a neutral buy-side advisor that the owner cannot trace back to a funded startup, a public-company acquirer, or a brand they recognize. The owner prices against an unknown demand. That's the only condition under which they price down.
2. Comparable-sale anchoring. A broker spends the first conversation aligning the discussion against closed comps (NameBio, DNJournal, private databases of off-market sales) rather than the seller's hope value. This alone moves price 30–60% on most deals. For .com specifically there are decades of comp data, which is why disciplined anchoring works so well.
3. Escrow and contracts. Licensed escrow (Escrow.com is the .com standard) plus a real purchase agreement covering trademark warranties, transfer windows, refund triggers, and (for large deals) holdback provisions. Wire-to-seller .com deals are how founders lose six and seven figures to fraud — there is an entire underground economy of fake .com sales.
4. Registrar transfer and registry lock. The mechanical handover. .com transfers have a 5–7 day window where DNS, MX, and TXT records can break if someone isn't watching the cutover. For higher-value .coms, getting registry lock activated at the new registrar is part of the transfer plan, not an afterthought.
5. Tax and structuring. Large .com purchases (over ~$250K) often need to be structured through an IP-holding entity for amortization, capitalize-vs-expense treatment, and (for international buyers) withholding tax. A broker who has done dozens of these will route you to the right counsel before, not after, the wire.

How brokers charge. Reputable buy-side brokers work on success fees: 10–15% of the closed price, no upfront retainer on qualified transactions over $100K. Smaller deals are quoted flat. You should never pay a meaningful retainer to a buy-side broker on a real .com target — if you are, you've hired the wrong shop. Sell-side brokers (representing the seller) work differently and you don't engage them; they're the counterparty.

See how Laser AI structures a buy-side .com engagement →

Pricing is less chaotic than the public sales make it look. The bands below are observed clearing prices across the last twenty-four months of .com transactions we've seen, brokered, or tracked publicly through NameBio and DNJournal.

Anchoring landmarks: Voice.com sold for $30M (2019). Business.com sold for $345M (1999) and Hotels.com for ~$11M (2001). More recently, AI.com reportedly traded to OpenAI in the ~$70M range (2024). These set the ceiling; 99% of "premium" .com deals you'll ever do live in the $25K–$500K band.

If the .com you want is unregistered (rare in 2026, but it happens for long-tail names), here's the practical comparison. Prices are 2026 retail for a 1-year .com registration; renewals are per year.

Prices fluctuate quarterly with Verisign wholesale changes. The signal here isn't the absolute number — it's the renewal differential. A $12/yr gap over a 10-year hold across a small portfolio adds up fast, and for a six-figure .com the right registrar (corporate-grade with registry lock) is a security decision, not a price decision.

The most common founder question, and the one with the most expensive wrong answers. The short version: ~70% of registered .coms have an owner willing to sell at some price, but the price you'll be quoted is a function of how visible you are when you ask. For .com specifically, owners are sophisticated and patient — many are professional domainers who hold inventory for a decade waiting for the right buyer.

Step 1: Confirm the name is actually owned, not in redemption. Pull the WHOIS. If the .com is showing as "pendingDelete" or "redemptionPeriod", it's a dropping name and may be available through a drop-catcher (SnapNames, NameJet, DropCatch) within 5–35 days. This is a different (and much cheaper) workflow than buying a held name.

Step 2: Check if it's listed. Search Afternic, Sedo, Dan, and the GoDaddy / Namecheap search results (which surface syndicated Afternic listings). About 30% of premium .coms have a public listing somewhere. If it's listed at a reasonable price, buy it through the platform — the escrow is built in.

Step 3: Identify the owner without revealing yourself. WHOIS for .com is usually privacy-protected post-GDPR. Check the site itself, archive.org snapshots, LinkedIn (the registrant's name may appear on a project the .com once pointed to), and reverse-WHOIS tools (DomainTools, WhoisXMLAPI). Do not email the owner from your company address yet.

Step 4: Open a price-discovery conversation from a neutral identity — a personal Gmail with no obvious tie to your company, or (better) a buy-side broker who can stay anonymous through the entire conversation. Lead with a fair anchor backed by NameBio comps. Lowballs cause the owner to ignore future emails or triple their next number — both outcomes are expensive.

Step 5: Use escrow. Escrow.com is the .com default and supports push-transfer between registrars. The seller pushes the .com to your registrar of choice, escrow verifies the transfer, then funds release. Never wire to a seller before escrow confirms the push, and never accept a "we'll skip escrow for a 10% discount" — that's the most common .com fraud pattern.

Step 6: Plan the DNS cutover. Pull the current MX, A, AAAA, TXT (especially SPF, DKIM, DMARC), and CNAME records before transfer. Decide what stays, what changes, and what your inbound-email reputation needs to preserve. The mechanical transfer takes 5–7 business days for .com between most registrars; corporate-grade registrars (MarkMonitor) require additional verification.

Step 7 (for high-value .coms): activate registry lock. Once the .com is at your registrar of choice, request Verisign registry lock if the registrar supports it. This requires an out-of-band verification (phone call, PIN) for any future transfer, registrar change, or nameserver edit — and it's the single most effective protection against social-engineering attacks on valuable .coms.

The single highest-leverage moment to acquire a premium .com is the window between an internal decision to rebrand (or to launch under a new name) and the public announcement. After the press release, the owner has already googled you, found your funding history, and mentally tripled their floor. Before it, you're an anonymous buyer.

The operational sequence for a rebrand. Week 0 (internal go decision): brief the broker, hand over the shortlist of target .coms, agree on a price ceiling per name. Weeks 1–2: broker opens outreach under a neutral identity on the top 2–3 candidates in parallel, surfaces a price band for each, you pick the best risk-adjusted target. Weeks 3–6: negotiate, sign purchase agreement, fund escrow, transfer. Week 7+: launch new brand publicly with the .com already in hand.

The operational sequence for a new company. Week 1 (term sheet signed): brief the broker before incorporating under the new name. Week 2: outreach opens, you decide go/no-go on the asking range. Week 3–4: negotiate, escrow, transfer. Week 5: incorporate, register socials, register the matching .ai / .io options if relevant. Public launch can now happen any time without the .com being a hostage.

What blows up stealth .com acquisitions. Public investor announcements before the deal closes. Founders posting "we're hiring at newco.com" on LinkedIn mid-negotiation. The seller googling the new company name and finding a Crunchbase profile, a Stripe Atlas filing, or a stealth-mode AngelList page. Press leaks of the rebrand. Any of these costs you the 3–10x markup we've been talking about, and for a six- or seven-figure .com that's real money.

It's a fair question. .ai, .io, .co, .xyz, and .app are all credible TLDs in 2026. AI-native startups frequently launch on .ai and stay there. Crypto-native projects live on .xyz. So why are companies still paying mid-six-figures (and up) to acquire the matching .com once they can afford to?

Universal type-in behavior. When a user hears a brand name out loud — on a podcast, in a meeting, on a phone call — they type the name followed by .com into the address bar. This is muscle memory baked over thirty years. Most browsers also append .com on a single-word entry. If you own newco.ai but newco.com belongs to someone else, you are sending traffic, brand searches, and trust signals to a competitor (or worse, a parked page covered in ads).

Email trust. Enterprise SPF/DKIM/DMARC filters, recruiter inboxes, and procurement systems all still treat [email protected] as the trusted default. Sales emails from [email protected] get caught in junk filters and flagged as suspicious roughly 2–3x more often, even with perfect SPF/DKIM setups. For B2B startups, this gap is measurable in pipeline.

Brand defense. The .com is the asset a competitor or a squatter will weaponize against you if you don't own it. A typosquatter on yourcompany.com running phishing or affiliate redirects is a brand and security incident waiting to happen. Owning the .com defensively, even if you primarily use the .ai, is table stakes once you cross ~$5M ARR.

The acquisition-readiness signal. Strategics and acquirers diligence the .com situation before they make an offer. A company that doesn't own its .com is materially less acquirable — the acquirer has to factor in a separate, post-LOI .com negotiation where the seller has all the leverage. Founders who plan to ever sell their company should own the .com before the conversation starts.

1. Negotiating from a founder@ email at the company domain. Instant 3–10x markup. Use Gmail or a broker.
2. Wiring before escrow clears the transfer. The most common fraud pattern in .com sales. Always use Escrow.com.
3. Buying the .ai first and hoping the .com stays available. It won't. Either lock a purchase option on the .com the same week, or budget for paying 5–10x more for it at Series A.
4. Skipping the trademark screen. Run a USPTO TESS search and a Madrid Protocol check before signing. A .com you can't legally use as a brand is worthless.
5. Ignoring legacy DNS and email records. MX, SPF, DKIM, and DMARC records you don't carry over break inbound email and DMARC reputation for everyone the previous owner ever emailed — and you'll inherit the deliverability mess.
6. Leaving a six-figure .com at a consumer registrar. Without registry lock and 2FA on a corporate-grade registrar, a single phishing email to a founder can cost you the .com. Move high-value .coms to MarkMonitor or CSC.

Where can I buy a .com domain?

Three channels. Registrars (Namecheap, GoDaddy, Cloudflare, Google/Squarespace, Porkbun) for unregistered names at $10–$15/yr. Aftermarket marketplaces (Sedo, Afternic, Dan, GoDaddy Auctions, Atom/Squadhelp) for owned names with listed prices, typically $2K–$500K. Buy-side brokers for premium or off-market .com names where the owner hasn't listed it for sale — every category-defining .com you've heard of trades through this third channel.

What's the difference between a registrar and a broker for .com?

A registrar sells you a .com that no one currently owns at a fixed retail price (~$10–$15/yr). A broker acquires a .com on your behalf from an existing owner — they negotiate, stay anonymous, handle escrow, and charge a success fee (typically 10–15%) on the closed price. Registrars are transactional infrastructure. Brokers are advisory. Since 99.8% of one-word English .coms have been registered since the early 2000s, brokers are the default channel for any premium acquisition.

How much does a premium .com domain cost?

Unregistered .com: $10–$15/yr at any registrar. Long-tail two-word .com on the aftermarket: $2K–$25K. One-word brandable .com: $50K–$500K. One-word category .com (the Stripe.com / Notion.com tier): $500K–$10M+. Tier-1 generics (AI.com, X.com, Voice.com) clear in the $30M–$100M+ range. The .com ceiling re-anchored in 2024 with the reported ~$70M AI.com sale to OpenAI.

Can I buy a .com domain that's already taken?

Yes, almost always — at a price. Around 70% of registered .coms have an owner willing to sell at some number, but the asking price is calibrated against the perceived buyer. Direct outreach from a founder email signals 'funded startup with a deadline' and routinely inflates the price 3–10x. A buy-side broker reaches the owner anonymously, anchors against comparable sales, and runs escrow.

Is GoDaddy or Namecheap better for buying a .com domain?

Either works for new registrations of .com. Cloudflare offers the cheapest renewals (at-cost, ~$10/yr). Namecheap and Porkbun are the founder defaults for transfers because of clean UX and low transfer fees. For premium aftermarket .coms, the registrar is irrelevant — you negotiate with the seller, then push the domain to whichever registrar you prefer at transfer time. GoDaddy controls Afternic, which is where most aftermarket .com listings actually live, so you'll often interact with their inventory even if you never register with them.

Do I need a broker for a $10,000 .com domain?

Probably not. If a .com is publicly listed on Sedo/Afternic/Dan with a buy-it-now price under $10K, just buy it through the platform. Brokerage makes sense when the .com is off-market, the price is over $50K, or you're acquiring under stealth ahead of a funding announcement, rebrand, or product launch.

Why is .com still the premium TLD if .ai, .io, and .co exist?

Because .com is the only TLD with universal trust, universal autocomplete, and universal default behavior. When a user hears your name in a podcast or on a call, they type yourname.com first. Alternative TLDs work for technical audiences and AI-native products, but every category-defining consumer brand still re-acquires the .com once they can afford it — it's the single highest-ROI brand asset most companies will ever buy.