Live: typeandfind.com
The problem
Finding a free domain name is slow. Most search tools check a handful of extensions, show stale results, or mark domains as "available" when they aren't. I wanted a search that checks everything at once, shows real answers, and helps when the name you want is taken.
I started from a licensed domain-tools codebase and turned it into a production product: I rebuilt the search, made availability data real, and did the security, reliability and launch work needed to run it publicly.
What I built
- Real-time availability across 1,133 extensions. Live checks against registry data (RDAP), with results streaming in as they arrive. I added fallbacks for extensions one data source didn't cover, and handled registry rate limits so searches recover on their own instead of getting stuck.
- No fake "available" results. Registry-reserved names are detected and shown correctly, and the "Get it" button only sends people to a registrar that actually sells that extension.
- Results people can scan. A 36-category grouping of extensions, a "best matches" view, and typing
name.tldsearches every extension, not the literal text. - AI name suggestions with OpenAI, protected against prompt injection and with usage tracking and budget limits so costs can't run away.
- Domain tools: WHOIS (with timeouts so slow servers can't hang a request), DNS checker, bulk search, hosting-provider lookup and an aftermarket listing integration.
- User accounts with watchlists and search history, plus a multi-registrar affiliate setup.
- Admin CMS so every page's content and SEO can be edited without a deploy.
Security and reliability
- Rate limiting on every API route, backed by MongoDB, with tighter limits on login, WHOIS, DNS and AI endpoints
- Fixed an SSRF risk, moved secrets and admin credentials out of the code, added security headers and a Content Security Policy
- Input length validation on all public endpoints
- Sentry error tracking, structured logging with request IDs, a health-check endpoint and uptime monitoring
- PM2 cluster mode with zero-downtime reloads, and a MongoDB backup plan
Stack
Next.js · React · Express · Node.js · MongoDB · OpenAI · RDAP / WHOIS / DNS · Sentry · PM2 · Tailwind CSS
What this means for your project
If you have an existing codebase or a half-finished product, I can take it to something you can safely launch: real data instead of placeholders, the security holes closed, costs under control, and monitoring in place so you know when something breaks.