How to Buy a Domain for Your Business in 2026 (Without Getting Upsold) | Buildrok

Why your domain choice actually matters

The domain is the one piece of your business that you carry between every other tool. You can switch website builders, switch hosting, switch email providers, switch CRMs. The domain follows you. That's why it's worth spending 30 minutes getting it right and a few hundred dollars getting it right over the next five years, rather than spending 30 seconds and regretting it for a decade.

A good business domain does three jobs:

1. Easy to say on a phone call. If a customer can't remember it after one minute, it isn't doing its job.
2. Easy to type without typos. If it contains a number that could be a word, a hyphen, or three Ss in a row, it isn't doing its job.
3. Easy to trust on first read. The TLD (the bit after the dot) carries trust signals. A .com still wins for most local service businesses.

Picking a TLD: .com first, and what to do when .com is taken

TLD stands for "top-level domain" – the bit after the dot. .com is the original general-purpose TLD and still by far the most-recognized. For a local service business, the ranking goes:

1. .com is the default

When someone hears "go to acme plumbing dot…" their brain automatically completes "…com." That mental autocomplete is the cheapest free traffic you'll ever get. If your exact name is available as a .com, take it.

2. .co is the closest backup

.co was Colombia's country TLD originally and has been marketed as a global alternative to .com for the last decade. It's short, recognizable, and trustworthy enough. Year-one promo prices are sometimes higher than .com (often $22 to $30 first year, around $25 to $30 renewal). If your .com is taken and you really want a two-or-three-letter brand match, .co is the best alternative.

3. .net is the legacy backup

.net is from the same era as .com but never reached the same trust level for businesses. It's fine as a backup if .com is gone and .co isn't a fit. Year-two renewal is typically $13 to $18.

4. .io and .ai are tech-tinted

Software companies use .io and .ai because of association. For a plumber, an HVAC company, or a landscaping business, those TLDs read as "this isn't for me." Skip them unless your customer base is heavily tech-literate.

5. .biz and .info exist but read as spammy

These TLDs have a low-trust association in most consumer minds. They're cheap. They look it. For a business that's trying to win local trust, the savings aren't worth the signal cost.

6. .us is fine for US-only businesses

.us is the country TLD for the United States. It's underused, which is a feature – the exact name match is often available. The downside: customers don't expect it. Local businesses sometimes use .us when .com is gone and they want a US-coded identity.

7. Niche TLDs (.plumbing, .roofing, .construction)

ICANN released a wave of trade-specific TLDs in the last decade. They sound clever in a meeting and read strange to a customer. "billsplumbing dot plumbing" gets a second-look reaction every time. Use them as a secondary domain that redirects to the .com, not as your primary.

The wholesale vs retail price gap

Domain registrations are wholesale-and-retail like most commodity products. Verisign, the registry that operates .com and .net, charges registrars roughly $9.59 a year wholesale for a .com renewal as of 2026 (ICANN-mandated fees included). Anything you pay above that goes to the registrar, the website builder, or both.

The registrars famous for renewal pricing closest to wholesale are Cloudflare Registrar (a true at-cost renewal, $9.77 for .com), Porkbun (~$11), and Namecheap (~$15 with frequent promotions). The registrars famous for higher renewal pricing are GoDaddy (~$22), Network Solutions (~$30), and Domain.com (~$25). Year-one promo pricing tells you nothing – everyone runs $0.99 to $9.99 promos. The number to look at is year-two renewal.

This is also where website builders sit on the curve. Some pass on near-wholesale pricing (Buildrok runs about $12 to $14 a year on .com renewals). Some mark up significantly (Wix and Squarespace renew closer to $15 to $24). None of them tell you this upfront. The reason "free first year" is a popular offer is that year-two renewal does the recovery.

WHOIS privacy: non-optional in 2026

When you register a domain, ICANN rules require the registrar to publish a record about who owns it. That record, called WHOIS, includes name, address, phone number, and email by default. It's public. Anyone can look up your business domain on a whois lookup service and see your home address if that's what you used at registration.

WHOIS privacy is a service the registrar offers where they substitute their own contact details for yours in the public record. Your real details still exist – the registrar has them, ICANN can compel disclosure for legitimate legal claims – but they're not on the open internet.

Without privacy, your home address ends up in the dataset that powers cold-call spam, junk mail, and the occasional more-sinister contact. With privacy, the registrar's address is what's listed and the dataset goes nowhere useful. The cost difference is usually zero today. Turn it on.

The upsells to refuse at checkout

Every major registrar's cart is a gauntlet of optional add-ons that read like requirements. None of these need to be in your first-year bill for a business domain to work. In rough order of how aggressive each one is:

Premium privacy (refuse)

Some registrars (looking at you, GoDaddy) offer a "Full Domain Privacy & Protection" tier above the basic privacy at $9 to $20 a year. The premium tier adds business-monitoring features that are debatable in value. The basic tier is what you need, and the basic tier should be free.

SiteLock or similar security monitoring (refuse)

$6 to $14 a month for malware monitoring on a site that doesn't yet exist or, when it does, is a static marketing page with no user-generated content. SiteLock exists for use cases that don't apply to a local service business website. If your website builder is reputable, this is a service you're paying for protection against a threat your builder already mitigates.

"SEO services" or "marketing services" (refuse)

$7 to $30 a month for automated keyword research, directory submission, and reporting. The features are weakly correlated with real local SEO outcomes. Skip the upsell. Spend the same money on a half-day with a local SEO consultant once a year, or pick a website builder that ships local SEO structurally (per-area pages, schema, headings) rather than as an ongoing service.

Email plans you don't need yet (refuse)

Microsoft 365 or Google Workspace bundled at $5 to $14 per user per month at checkout. If you already have an email provider you like, you don't need a new one. If you don't, you can add one in five minutes whenever you're ready. There's nothing about email that has to be decided at the same time as the domain.

Domain monitoring or expiration insurance (refuse)

$3 to $5 a year for notifications when someone tries to register a similar domain, or "insurance" against you forgetting to renew. Turn on auto-renew (free), set the renewal email to an account you actually check, and you've solved the same problem.

The "we'll buy it for you" backorder racket (refuse)

This is the one that gets the most people: you type in your dream domain, it's taken, and the registrar offers to "try to acquire it for you" for $79 to $129 plus the cost of the domain. What they're actually doing is putting you on a backorder list in case the current owner lets the registration lapse. The backorder almost never converts. The $79 is for placing your name on a list. Decline.

The order to do things

Buying a domain shouldn't take more than 20 minutes. Run the steps in this order:

1. Search for the exact name on .com. If available, you're done with the TLD question.
2. If .com is taken, run the alternatives. Try a slight variation (add the city, drop an article, hyphenate). If a clean variation of .com works, take it. Only step away from .com when no good variation exists.
3. Do a basic trademark check. Search the USPTO trademark database for the name. Also search Google. You're not looking for a perfect clearance – you're looking for "is anyone going to send me a cease-and-desist if I use this name on a website?" If yes, pick something else. If no, proceed.
4. Pick a registrar that charges close to wholesale and includes WHOIS privacy free. Or pick a website builder that does both inside the dashboard.
5. Buy the domain. Decline every upsell at checkout. Confirm WHOIS privacy is enabled.
6. Turn on auto-renew, with the renewal email pointed at an inbox you check.

The case for buying inside your website builder

Buying the domain at the same place you'll host the site removes the hardest step of getting a custom domain live: pointing the DNS records. If your website builder controls both the registration and the hosting, the domain you just bought is the live URL of your site within minutes, not hours.

buildrok.com/app/sites/your-business/domains

Domain · Search

Find your domain

Type a name. We'll check .com, .net, .co, .io, .org, .biz, .info, .us and more.

northendhvac 3 results

northendhvac.com

Available · WHOIS privacy free · Auto-renew $14/yr

$12/yr Buy

northendhvac.co

Available · short alternative

$22/yr

northendhvac.net

Taken

–

Included at no extra charge

• · WHOIS privacy on by default
• · DNS records configured automatically
• · SSL certificate issued the moment registration confirms
• · One renewal invoice with your site subscription

Specifically, in-platform purchase removes three failure modes that catch most non-technical owners:

1. You don't copy DNS records between two control panels. Every "connect your domain" guide on the internet starts with "log into your registrar's DNS settings." That's where the wheels come off. If the builder owns the domain, that step doesn't exist.
2. One invoice, not two. Domain and hosting renew on the same cycle. You don't get blindsided by a $24 charge from a registrar account you forgot about.
3. SSL provisioning is automatic and timed correctly. When the domain and host are at the same company, SSL is issued the moment the registration confirms. When they're separate, SSL has to wait for DNS propagation, which can take 24 hours.

One quick word on email

Once you own a domain, you can run a real business email on it – yourname@yourbusiness.com. That's worth doing, but it's a separate purchase from the domain itself, and you don't need to decide on the same day. Google Workspace is the obvious choice at around $7 per user per month. Microsoft 365 is the obvious alternative at around $6 per user per month. Both let you set up the domain email in 10 minutes once you decide. The registrar offering you email at checkout is usually offering one of those two providers with a markup. Skip the checkout option and buy directly from Google or Microsoft.

What "buying a domain" should actually feel like

The honest version of buying a business domain in 2026 is a five-minute task. Search the name. Confirm the TLD. Confirm WHOIS privacy is free and on by default. Decline every add-on at checkout. Turn on auto-renew. Done. Total cost should be in the $9 to $15 range for the first year and similar for every renewal year.

If the experience doesn't feel like that – if you're scrolling through six pages of upsells, if WHOIS privacy is a paywalled feature, if the renewal price is double the promo price – you're at the wrong registrar. Pick a different one.

At Buildrok, the domain step is one screen of the dashboard. Search, pick TLD, click buy. WHOIS privacy is on. DNS configures itself. SSL is issued. The bill matches the price you saw on the search screen. That's the version we built because that's the version that should exist. See pricing and the domain flow →.