[.]
is a node in the DNS tree, just like wikipedia.[org.]
and en.[wikipedia.org.]''. As such, it has its own
DNS records. Due to the structure of
DNS, each node in the tree has its own collection of
records, and since top-level domains are nodes in DNS, they have records of their own. For example, querying
org itself (with a tool such as
dig,
host, or
nslookup) returns information on its
nameservers: QUESTION org. IN ANY ANSWER org. 21599 IN NS a0.org.afilias-nst.info. org. 21599 IN NS a2.org.afilias-nst.info. org. 21599 IN NS b0.org.afilias-nst.org. org. 21599 IN NS b2.org.afilias-nst.org. […]
Dotless domains are top-level domains that take advantage of that fact, and implement
A,
AAAA or
MX DNS records to serve webpages or allow incoming email directly on a TLD – for example, a webpage hosted on
http://example/, or an email address
user@example.
ICANN and
IAB have spoken out against the practice, classifying it as a security risk among other concerns. ICANN's Security and Stability Advisory Committee (SSAC) additionally claims that
SMTP "requires at least two labels in the
FQDN of a mail address" and, as such, mail servers would reject emails to addresses with dotless domains.
ccTLDs, however, fall largely under their respective country's
jurisdiction, and not under ICANN's. Because of this, there have been many examples of dotless domains on ccTLDs in spite of ICANN's vocal opposition. As of July 2025, that is the case of: •
Uzbekistan's
.uz, online at https://uz./ ()It is a mirror of https://cctld.uz/, albeit with an invalid certificate. In 2023, it used to be the case of: •
Anguilla's
.ai, online at http://ai./ ()It simply displayed a notice that the website was no longer public.The TLD no longer has an A or AAAA record. Other ccTLDs with A or AAAA records, as of July 2025, include:
.cm,
.tk and
.ws. A similar query to
orgs presented above could be made for
ai, which showed A and MX records for the TLD: QUESTION ai. IN ANY ANSWER ai. 21599 IN A 209.59.119.34 ai. 21599 IN MX 10 mail.offshore.ai. ai. 21599 IN NS anycastdns1-cz.nic.ai. ai. 21599 IN NS anycastdns2-cz.nic.ai. ai. 21599 IN NS pch.whois.ai. […] Historically, many other ccTLDs have had A or AAAA records. On 3 September 2013, as reported by the
IETF, they were the following:
.ac,
.dk,
.gg,
.io,
.je,
.kh,
.sh,
.tm,
.to, and
.vi.
New TLDs Following a 2014 resolution by ICANN, newly registered TLDs must implement the following A, MX, TXT, and SRV apex DNS records – where stands for the registered TLD – for at least 90 days: . 3600 IN MX 10 your-dns-needs-immediate-attention.. . 3600 IN SRV 10 10 0 your-dns-needs-immediate-attention.. . 3600 IN TXT "Your DNS configuration needs immediate attention see https://icann.org/namecollision" . 3600 IN A 127.0.53.53 This requirement is meant to avoid domain name collisions when new TLDs are registered. For example, programmers may have used custom local domains such as
foo.bar or
test.dev, which would both collide with the creation of gTLDs
.bar in 2014 and
.dev in 2019. While this does create apex DNS records of type A and MX, they do not qualify as a dotless domain, as the records should not point to real servers. For instance, the A record contains the IP 127.0.53.53, a loopback address (see
IPv4 § Addressing), picked as a mnemonic to indicate a DNS-related problem, as
DNS uses port 53. ==Pseudo-domains==