About rate limits — read this first. Public, no-cost RDAP endpoints throttle you. rdap.org sits behind Cloudflare and allows roughly
10 requests per 10 seconds; go faster and you get HTTP 429 (rate limited). A red "unsure" cell means the check failed — usually a rate limit — it does
not mean the domain is taken or available. This tool protects you automatically: it keeps requests serial by default, backs off and slows down when it sees 429s, and re-queues throttled cells for a second pass. Practical tips: keep the delay at
1100 ms or higher, leave concurrency at
1 for rdap.org, scan in smaller batches using the filters, and press
"Retry unsure" after a run to clean up leftovers.
Complete coverage. Every combination that
.fi permits is reachable here. The base set (a–z, 0–9) is always on; toggle the
å ä ö,
Sámi, and
hyphen groups above to include them. A hyphen may not be first or last, so it only appears in the middle of a 3-character name (never in a 2-character one). The live counter next to each tab shows exactly how many combinations the current character set produces.
Where the available ones hide. Pure two-letter combos (aa–zz) are essentially all registered. Your best odds are combos with
digits or
national characters (å ä ö / Sámi), and of course the much larger 3-character space.
Heads up on scan size: the full 3-character Finnish set is ~59k combinations, and enabling Sámi pushes it far higher. At a safe ~1 request/second a complete sweep takes many hours to days — the timer shows a live estimate. Scan a slice at a time with the filters (e.g. only-digits or only-national) rather than everything at once.
"Available" here means
not currently in the registry per RDAP — it does not guarantee you can register it (some short names are
reserved or
premium-priced). Confirm and register via the official search at
registry.domain.fi. Registration always goes through an accredited registrar (Zoner, Louhi, Domainhotelli, etc.).