Domains & Registrars

When you “buy a domain”, what did you actually buy? Not a thing you own forever — a lease on a name in a global directory. Understanding the lease is how you avoid losing your identity overnight.

⏱ ~12 min · 🟢 Beginner · Prerequisite: Lecture 1

🎯 What you’ll be able to do

Explain the registry / registrar / registrant chain and who ICANN is
Read a domain’s anatomy (TLD, root, subdomain) correctly
Describe the domain lifecycle and why auto-renewal off is dangerous
Separate “owning the domain” from “hosting the website/email” — the #1 confusion

The mental model

A domain name is a lease on a name, recorded in a global registry. You don’t own ayrisglobal.com — you hold the exclusive right to use it for a period (1–10 years), renewable. Stop paying and it goes back on the market.

Real stakes

Your domain is your identity — website, every email address, your brand. Lose it (expiry, hijack) and an attacker can receive your email and impersonate you. This is why the boring details below matter.

Anatomy of a domain

Read it right to left — most general to most specific:

            assure  .  ayrisglobal  .  com
              │            │            │
          subdomain    second-level    TLD
                          (SLD)      (top-level)

Part	Example	What it is
TLD (top-level domain)	`.com`, `.online`, `.in`, `.org`	The category, run by a registry
Second-level (SLD)	`ayrisglobal`	The name you registered
Root / apex	`ayrisglobal.com`	SLD + TLD — what you actually buy
Subdomain	`assure.ayrisglobal.com`	A child you create freely, no extra registration

This one fact saves you money

Subdomains are free and unlimited. Once you own ayrisglobal.com, you can make assure., app., mail., blog. … as many as you want, at no cost — you just add DNS records (lecture 3). You only pay for the root domain.

Who’s who — the registration chain

ICANN  ──►  Registry  ──►  Registrar  ──►  You (Registrant)
(rules)     (runs a TLD)   (sells to you)   (use the name)

Player	Role	Example
ICANN	Non-profit that governs the whole domain system	(one global body)
Registry	Operates a specific TLD’s master database	Verisign runs `.com`
Registrar	Accredited reseller you buy/manage through	Hostinger, GoDaddy, Namecheap, Cloudflare
Registrant	You — the legal holder	ayrisglobal

Where Cloudflare fits

Cloudflare is two roles at once for you: a registrar (you can buy/transfer domains there at cost price) and a DNS provider + CDN (lecture 3 & 6). Your ayrisglobal.com is registered at Hostinger but its DNS is run by Cloudflare — perfectly normal, the two are separable.

Quick gut-check on the chain before we move on:

WHOIS — the public record

Every registration has a WHOIS record (registrant, dates, nameservers). Most registrars offer free WHOIS privacy to mask your personal details behind a proxy — keep it on to avoid spam and doxxing.

The domain lifecycle ⚠️

This is the part that bites people:

Active ──(expiry date passes)──► Grace period (~30–45d, renew at normal price)
      └─► Redemption (~30d, renew but with a big fee)
           └─► Pending delete (~5d)
                └─► Released — anyone can grab it

Auto-renewal OFF = a ticking clock

If auto-renew is off and your card/reminders fail, the domain silently expires. During grace you can still recover it; past redemption it gets expensive; past that it’s gone — and squatters monitor expiring domains to snatch valuable names. Turn auto-renewal ON for any domain you care about, and keep a backup payment method.

The biggest confusion: domain ≠ hosting ≠ email

These are three separate purchases that people constantly conflate:

You’re paying for…	What it gives you	Provider can be…
Domain registration	The name `ayrisglobal.com`	Hostinger / Cloudflare / Namecheap
Web hosting	A server to run your site (lecture 4)	Cloudflare Pages / Vercel / a VPS
Email hosting	Mailboxes for `you@domain` (lecture 5)	Zoho / Google / Hostinger

All three can live at different companies — and changing one does not require touching the others. You can move hosting and keep the domain. You can move email and keep both. The glue that connects them is DNS (next lecture).

⚠️ Common misconceptions

Myth	Reality
”I own my domain forever.”	You lease it. Miss renewal → you lose it.
”Moving hosts means moving the domain.”	No. Hosting and registration are independent; you just repoint DNS.
”A subdomain costs extra / needs registering.”	Free and unlimited once you own the root.
”My registrar must also host my site/email.”	They often offer to, but you’re free to use anyone.

🧪 Try it yourself

# Look up the public WHOIS record (registrar, dates, nameservers)
whois ayrisglobal.com         # Mac/Linux; on Windows use https://who.is

# See which nameservers (DNS provider) the domain points to
nslookup -type=ns ayrisglobal.com

You’ll see ayrisglobal.com uses Cloudflare nameservers even though it’s registered at Hostinger — live proof that registration and DNS are separable.

✅ Check yourself

What's the difference between a registry, a registrar, and a registrant?

The registry operates a TLD’s master database (e.g. Verisign for .com). The registrar is the accredited company you buy/manage the name through (Hostinger, Cloudflare). The registrant is you — the legal holder of the name.

Do you need to register `assure.ayrisglobal.com` separately?

No. It’s a subdomain of a domain you already own. Subdomains are free and unlimited — you create them with DNS records, no registration or extra fee.

If auto-renewal is off and the domain expires, is it instantly gone?

Not instantly. It enters a grace period (recoverable at normal price), then redemption (recoverable with a hefty fee), then pending-delete, then it’s released to the public. But relying on this is dangerous — turn auto-renew on.

Can you change web hosts without moving the domain?

Yes. The domain registration and the hosting are independent. You just repoint the relevant DNS records (lecture 3) to the new host. The domain itself never moves.

What is ICANN's role, and is it the same as a registrar?

No. ICANN is the non-profit that governs the whole domain system and accredits registrars — it sets the rules. A registrar is an accredited company (Hostinger, Cloudflare, Namecheap) that actually sells and manages names for you. ICANN never sells you a domain directly.

Reading right-to-left, label the parts of `assure.ayrisglobal.com`.

com is the TLD (top-level domain, run by a registry). ayrisglobal is the second-level domain (SLD) — the name you registered. Together ayrisglobal.com is the root/apex (what you actually buy). assure is a subdomain — a free child you create with DNS records.

Why keep WHOIS privacy turned on?

WHOIS is public. Without privacy, your name, email, and address are exposed to anyone who looks — inviting spam, scams, and doxxing. Free WHOIS privacy swaps your details for a proxy’s, so the registration stays valid but your personal info stays hidden.

📚 Resources

🟢 ICANN — How domains work / registrant rights: icann.org/resources/pages/educational
🟢 Cloudflare — What is a domain name: cloudflare.com/learning/dns/glossary/what-is-a-domain-name
🟡 Cloudflare Registrar (at-cost domains): cloudflare.com/products/registrar
🟡 ICANN WHOIS lookup: lookup.icann.org

🧾 Key terms

TLD · the .com part · SLD · the name you bought · Apex/root · domain.com itself · Subdomain · free child name · Registry / Registrar / Registrant · runs-TLD / sells-it / holds-it · WHOIS · public registration record · Grace/Redemption · post-expiry recovery windows.

One-line summary

A domain is a renewable lease on a name. Registration, hosting, and email are three separate things connected by DNS — change one without touching the others, and keep auto-renewal on.

Still Unclear?

Paste any of these into Claude to go deeper:

“Walk me through the exact chain from ICANN down to me as the registrant when I buy mydomain.in. Who touches the request and what does each one do?”
“I registered my domain at one company but want my DNS at Cloudflare. Explain step by step what ‘changing nameservers’ actually does and why it doesn’t move my registration.”
“My domain expired last week. Explain the grace / redemption / pending-delete / released timeline and what my realistic recovery options and costs are at each stage.”

Why AI Can’t Do This For You

AI can explain the registry/registrar/registrant chain perfectly, but it can’t notice that your card on file expired, or that auto-renew was silently off, or that the panicked client email about a dead website is actually a DNS-vs-registration mix-up. The judgment — separating domain from hosting from email under pressure, spotting the ticking expiry clock before a squatter does — only comes from owning a real domain and feeling the stakes. Buy one cheap name, log into the registrar, and look at the actual settings.

Module done? Add it to today’s tracker