How buyers find premium domains that aren't listed.

There is a common assumption among first-time domain buyers that the best names are listed for sale somewhere, and that the work is mostly about picking the right one off the shelf. That assumption is wrong in almost every important case. The names that route an entire category of buyer interest, country names, generic single-word domains, exact-match keyword properties, are usually held by their current owners on purpose. They sit, unadvertised, often without even a redirect, for years at a time. Finding them, and finding the right owner to address, is the first real skill in domain acquisition.

This essay walks through the discovery side of that work. It assumes a serious buyer who has identified a category or a specific name and wants to know how the search actually proceeds in 2026. The tools and tactics below are the same ones that brokers use behind the scenes, written here without the gatekeeping.

Step one: confirm the name is registered and learn what you can

The first task is a simple lookup. Every active domain has a public record in the WHOIS database, and most have a public record in the newer RDAP system that replaces it for some registries. A free WHOIS query at lookup.icann.org returns the registrar, the creation date, the expiration date, the most recent update, and, depending on the privacy settings, sometimes a contact path for the owner.

What you are looking for at this stage is signal about the asset's history. A domain registered in 1997 that has been continuously renewed for nearly thirty years is held by an owner who understands its value. A domain registered last year by a privacy service is in different hands and probably a different conversation. The registrar matters too. A name held at a registrar that specializes in business clients (MarkMonitor, CSC) typically signals a corporate owner. A name held at a consumer registrar (GoDaddy, Namecheap, Porkbun) can mean either a serious owner who simply prefers low fees or an individual holder.

Most premium domains use a WHOIS privacy service that masks the owner's name. That is normal. It is not evasion; it is the default setting at most registrars now that ICANN's GDPR-aligned policies have largely removed personal contact details from public WHOIS records. You will rarely get an email address from WHOIS in 2026. What you will get is the registrar and the date math.

Step two: find comparable sales

Before any contact, you want a real-world sense of what comparable names have sold for. This is the single most important piece of preparation, and it is the step most first-time buyers skip. Two free resources do most of the work.

NameBio maintains the largest public database of historical domain sales, more than a billion dollars in transactions logged, searchable by keyword, length, extension, and date. In 2024, the top 100 NameBio-tracked sales averaged $457,648 with a median of $142,131, per its annual reports. Those numbers set the floor for the category. To make that top 100, a domain needed to clear $85,000. The point of looking is not to predict a specific price, since premium sales are highly variable, but to anchor your own expectations in evidence rather than a guess.

DNJournal publishes weekly reports of the highest reported sales in the industry. Reading three or four months of those reports tells you which categories are hot, which extensions are moving, and which kinds of names have stalled. For geographic and country-keyword domains, the historical reference points include sales like Russia.com (publicly reported at $1.5 million), California.com (publicly reported at multi-million range in a corporate transaction), and Hawaii.com (developed into a tourism brand rather than sold). These are not necessarily what any particular name is worth today. They are the rough shape of the market.

What public sales data tells you, and what it doesn't.

NameBio and DNJournal capture the sales that are reported. Many transactions are private and never publicly disclosed, especially in corporate acquisitions where the domain is bundled with brand assets and the line item is not broken out. Public comparable sales therefore represent a floor, not a ceiling, for the category. Always assume the largest unreported transactions are larger than the largest reported ones.

Step three: research the asset itself

Before contacting an owner, learn what the domain is, has been, and is currently doing. Four free tools cover most of this.

The Wayback Machine at web.archive.org stores periodic snapshots of nearly every public website going back to 1996. Type the domain into it. If the name has ever been actively developed, you will see versions of the site from different years. Quiet periods, redirects, parking pages, and active development phases are all visible. A long history of careful development by the current owner signals one type of seller. A long history of parking signals another. Either is fine; they imply different negotiating contexts.

SimilarWeb or Semrush can estimate current traffic. If you see the domain serving a lander or a redirect, plug it in to either tool's free public-data view and you will get rough numbers for monthly visits and traffic sources. Direct traffic on a category-keyword domain is the most interesting signal. People typing the name into the address bar without being prompted by a search result is value the buyer inherits on day one.

DNS history. Tools like SecurityTrails or DNSTrails show a domain's name-server history over time. If the name has moved between hosting providers and registrars frequently, that is a story. If it has sat at one registrar with stable DNS for two decades, that is a different story. Neither is good or bad. Both are information.

Search the name itself. Run the domain through a normal Google search in quotes. Look at the news mentions, the social media references, and the trademark of public attention it carries. If the name is referenced in published articles or industry conversations, that is part of what the buyer is acquiring.

Step four: think about who the owner probably is

Most premium domains are not held by domain-investor companies. They are held by long-tenured individual owners, by small private entities, or by larger businesses that registered the name years ago for a project that never launched. The owner's likely motivation shapes how you should approach them.

If a name has been continuously renewed since the late 1990s and has never been seriously developed, the owner is most likely an experienced individual who has been approached many times before and has rejected the previous offers. A weak introductory note from a stranger will be ignored. A specific, well-reasoned offer with a clear plan and a real figure will at least be read.

If a name was developed at one point and later parked, the owner may be a former operator who has moved on but is emotionally attached. These conversations often require more patience and more context.

If a name is held under a corporate registrar by a large entity, the conversation is procedural rather than personal. The buyer will deal with general counsel or a corporate development team, not the original founder.

None of these patterns is a rule. They are a starting point for tone.

Step five: find a contact path

With WHOIS privacy as the modern default, the contact path is usually the website itself rather than the WHOIS record. Check the domain in a browser. Many owners point unsold premium domains at a single-page contact lander, sometimes branded ("offered for acquisition"), sometimes minimal ("this domain is held"). A clear lander with a dedicated email is the cleanest signal that the owner accepts inquiries. This site you are reading is itself an example of that pattern.

Where no lander exists, options narrow. You can write through the registrar's contact form if one is available, send a postal letter to the registrant address if it is unredacted, or use a paid broker who has direct relationships with major registrars and can sometimes route a message. A broker's main value at the discovery stage is not negotiation; it is the contact path itself.

What you should not do is harvest a guessed email from a different domain owned by the same person, or scrape contact details from social media to construct an unsolicited approach. Premium-domain owners are approached frequently. They sort serious inquiries from spam quickly. The fastest way to be filtered as spam is to write from an obviously researched but uninvited channel.

Step six: write the first message

A first message to a premium-domain owner should do four things: identify who you are, explain what you would build, propose a specific figure, and indicate timing. The most common mistakes are vagueness ("I am interested in your domain, what are you looking for?") and excessive flattery ("your incredible domain"). Both signal an inexperienced buyer.

A serious first message reads more like this:

I am the founder of [company], operating in [category]. I would acquire [domain] to launch [specific use]. My initial offer is $X. I can close through Escrow.com on a standard registrar-to-registrar transfer within a week of agreement. Please let me know if this is in a range that warrants further conversation.

Five sentences, four pieces of information, one specific number. The owner can say yes, no, or counter. None of the three is a difficult next step. Compare that to a vague inquiry, which has no obvious response and almost guarantees no reply.

The "specific number" piece is uncomfortable for first-time buyers because they don't know what to offer. The comparable-sales work in step two is what removes the guesswork. You won't be right, but you will be in the right order of magnitude, and the owner will know they are talking to someone who has done the math.

What changes for geographic and country-keyword domains

Most of the above applies to any premium name. The geographic-keyword category, country names, city names, region names, has two specific differences worth noting.

First, the universe is small and fixed. There are roughly 200 countries with internationally recognized names and several thousand cities of meaningful size. The set does not grow. Owners of geographic-keyword properties in the major extensions know this. They are aware their name is one of one, not one of many, and they price accordingly.

Second, the use case is multi-vertical. A country-keyword domain is plausibly the right address for a tourism brand, a media brand, an export brand, a cultural-content platform, and several other categories at once. That breadth makes the asset more valuable to an operator with a plan than to a passive investor, which in turn means that owners often hold these names specifically waiting for a category-defining operator rather than the highest passive offer. A buyer for a geographic-keyword domain should therefore lead with the plan, not the figure. The figure should follow as confirmation that the plan is funded.

For more on what makes a country-keyword namespace itself valuable, the second essay in this journal looks at how a single country's brand pulls across multiple commercial vectors at once, and the first essay looks at the underlying export economics of one such country.

What comes next

Discovery is the start. Once a buyer has located the name, learned its history, written a serious first message, and received some response from the owner, the work shifts to negotiation and closing. The mechanics there, comparable-sale anchoring, offer letters, escrow setup, EPP transfer codes, registrar choice, are the subject of the next essay in this series.

For now, the practical takeaway is that the names worth buying are rarely listed. They are found, researched, and approached. The buyer who does that work before sending any message has a meaningfully higher chance of a serious conversation than the buyer who treats the discovery side as an afterthought.