How to Choose a Short Domain for Your Brand Without Overpaying

A .site domain costs $1.96 for the first year. Year two costs $28.84. Same name, same shop, nearly fifteen times the price. Nothing at checkout warns you.

Choose a short domain for branded links by its renewal price, not its first-year price. Find out what year two costs before you pay for year one. Then point your links at a subdomain, like go.yourbrand.com.

Every price here was read in September 2026, on the seller's own page. Domain prices move. Check them again on the day you buy.

Why does the price jump in year two?

Because the cheap year is a sale, and the sale usually starts at the registry. A registry is the company that runs a domain ending, such as .com or .site.

Porkbun, a domain seller, explains it in its own help pages:

"Registries offer low first-year wholesale prices to encourage new registrations, but usually do not provide discounts on renewals."

Read that again. The discount starts above the shop. So moving to a different shop does not get you out of it.

Here is what it looks like in money. These are Porkbun's public prices for one year, read in September 2026.

.click, .online, .site and .xyz each cost under $2.10 in year one. Two of them then cost $28.84 every year after, for as long as you keep it.

The second trap: premium names

Registries flag some strings as premium and charge more for them. Short names are exactly the ones that get flagged. Porkbun's help page on premiums is direct:

"Common first and last names, short words, and short numbers are more likely to be flagged as premium by a registry."

One common warning about premiums is overstated. They do not all renew high. The same page says some renew at a low, non-premium price, while others renew high every year.

So the rule is not "avoid premium names". It is "read the projected renewal price at checkout, every time".

Can you still buy a short .com?

Not in practice. We checked 30 random three-letter .com domains in September 2026. All 30 were taken. We did the same with 30 four-letter ones. All 30 again.

Five of those sixty had no name servers, so they looked free. A WHOIS lookup showed every one was registered anyway. gyp.com has been taken since 1995.

So stop hunting for one. Your real choices are a longer .com, a different ending, or the resale market.

Resale is a different budget. DNJournal keeps the public record of reported sales. Reported sales of three- and four-character .com names in 2026 ran from six figures into the millions. Those are the sales people chose to publish, so treat them as a ceiling, not an average. Anyone quoting you a typical price for a four-letter .com is guessing.

Why .com prices barely move

Verisign runs the .com registry. Its filing with the SEC sets out the rule. It may raise the price "up to 7% in each of the final four years of each six-year period."

That is not a yearly rise, and plenty of articles say it is. The wholesale fee has sat at $10.26 since 1 September 2024. It goes to $10.97 on 1 November 2026. That is 26 months with no change.

The same filing corrects a second myth. .net is allowed 10% a year, not 7%, through 30 June 2029.

Is .io safe to use?

Yes, as things stand today. The panic you have read about it is overdone.

We queried the DNS root zone directly in September 2026. The io. zone returns its name servers normally. IANA's Root Zone Database lists .io as an active country-code ending. Nothing has been retired, and no removal notice exists.

Here is why people worry. The UK agreed to hand the Chagos Archipelago to Mauritius. .io exists because IO is a code in the ISO 3166-1 country list.

ICANN addressed this in November 2024, and that post is still its latest word on it. ICANN wrote that IO "persists in the ISO 3166-1 standard and there has been no change to the standard as a result of the announcement." It added that much of the talk about .io "is simply speculation."

The mechanism matters more than the rumour. IANA's rule is that a country ending loses its place when the code leaves ISO 3166-1. A treaty on its own does not do it. After a removal notice there is a five-year wind-down, and the registry can ask for five more years.

So even in the worst case, a country domain does not vanish overnight. You would get years of public notice.

What can a country registry do to your domain?

More than most buyers expect. A country ending is not property under your own law. It is a delegation to a national registry, and that registry's rules govern your name.

Four examples, all checked in September 2026:

• .ly (Libya). Names under four characters need a local presence, per the registry's own site. In 2010 the registry revoked vb.ly, an adult short-link service, on content grounds. That part comes from reporting at the time. The registry's original statement is no longer online.
• .gg (Guernsey). The registry's terms let it cancel a name that "could damage the reputation of the Channel Islands". You get notice and a right of appeal, but the registry decides what damages that reputation.
• .is (Iceland). ISNIC requires working name servers as a condition of the registration. Break your DNS, ignore the warning for 60 days, and the domain is closed.
• .co (Colombia). The government re-tendered the contract. 3.3 million .co domains moved to a new operator on 4 October 2025.

Two more are worth knowing. .ai has a two-year minimum for registration and renewal, so you cannot buy a single year. And .sh is run by the same company as .io. Picking .sh to hedge against .io hedges nothing.

The risk is rarely that a country disappears. It is that the registry changes its rules, its owner or its prices, and you get no vote.

Where can you actually buy it?

Not every shop sells every ending. Cloudflare Registrar sells at cost, and says you "only pay what is charged by registries and ICANN". On a name you keep for years, that adds up.

But we parsed Cloudflare's published list of endings in September 2026. .gg, .sh, .ly, .to and .am are not on it. Choose one of those and you are locked into a marked-up seller for the life of the name.

Buying at cost has limits too. It removes the seller's markup. It does not stop a registry raising its price, and it does not make a premium name cheap.

Two costs people forget:

1. Letting it lapse is expensive. Porkbun charges a $200 restore fee on top of the renewal once a name reaches redemption. Some country endings are worse and stop resolving the day they expire.
2. You cannot move it for 60 days. ICANN's transfer policy blocks a transfer within 60 days of registration. That rule covers generic endings. Country registries set their own.

So buy where you plan to stay, and switch auto-renew on the day you buy. A lapsed short domain breaks every link you have ever published, which is link rot of the worst kind.

Should your short domain for branded links be a subdomain?

For most people, yes. go.yourbrand.com is not glamorous. It costs nothing extra, it renews with your main domain, and it works everywhere.

There is a technical reason, and ignoring it wastes real time.

A CNAME is the DNS record that forwards one hostname to another. You cannot put one at the root of a domain. RFC 1912 gives the reason: "A CNAME record is not allowed to coexist with any other data." A root always carries other records, so a CNAME there is invalid.

Sellers offer workarounds with names like ALIAS, ANAME and CNAME flattening. None of them is a standard. The IETF draft for ANAME ran out in 2019 without becoming one.

Here is the expensive part: AWS Route 53 and Azure DNS alias records cannot point at an outside host. Route 53 aliases only target selected AWS resources, or another record in the same zone. Azure's only target Azure resources. Many guides tell you to just use an ALIAS record. On those two providers, that advice fails.

Cloudflare's CNAME flattening does reach an outside host, and it runs at the root by default. DigitalOcean offers no alias record at all.

Pick a subdomain and none of this applies. One plain CNAME, any provider, no vendor feature needed. Our guide to custom domain short links walks through the record itself.

Will a short domain hurt your email or your rankings?

Probably not, and most of what circulates about this is folklore.

Google and Microsoft both publish sender guidelines. Neither one mentions URL shorteners. Neither has a reputation tier for new domains either. Google's four tiers are all defined by spam history, with no bucket for new senders. Its only rule naming new domains is a faster enforcement timetable for authentication.

One real mechanism does exist. Spamhaus's domain blocklist carries a code, 127.0.1.103, that marks a domain as an "abused spammed redirector". Mail servers that consult the list filter messages carrying a listed domain.

Note what that describes. It is about a domain being abused, not about it being short or new. A shared public shortener carries other people's behaviour. A domain only you use carries only yours.

On search, Google treats a permanent redirect as a signal about which page should be the canonical one. Our post on whether short links hurt SEO covers the rest.

What about HTTPS?

Your short domain needs a certificate, and free ones cover it. Let's Encrypt issues domain-validated certificates. Its current policy says they are valid for up to 100 days. Nearly every article still says 90 days, and that is out of date.

Check one more thing before you choose. .app, .dev and .page sit on the browser HSTS preload list. Chrome upgrades every request to those endings to HTTPS before it leaves the browser. Pick one and your links stay broken until the certificate exists.

The five-minute check before you buy

1. Decide the name first. The ending is a cost decision. The name is a branding one.
2. Look up year two's price on the seller's own page. If it is not shown next to the buy price, treat that as a warning.
3. Put the name in the cart and read the projected renewal figure. That is where a premium name shows itself.
4. Check that your seller carries that ending at all.
5. If it is a country ending, spend five minutes on the registry's terms.

Then switch auto-renew on. That one click protects every link you will ever publish on it.

Common questions

Where to point it once you own it

Whatever domain you buy, you point a subdomain of it at your short-link tool with a single CNAME record. clik.so's free plan includes one custom domain and needs no TXT record. Any decent tool will do the same job, so pick the one you like. The domain is the part that is yours.