What is .cfa?
Brand TLDs operate under Specification 13 of ICANN's registry agreement. It lets a trademark owner keep every second-level name for itself, so you won't find .cfa names for sale at any registrar.
ICANN's records put the delegation of .cfa on May 2, 2015. Like most of the newer endings, it was applied for in the 2012 New gTLD Program round and its registry agreement was signed on August 28, 2014.
Under the hood, the root zone points to 6 name servers for .cfa, every one of them reachable over IPv6. The delegation is DNSSEC-signed, so resolvers can verify that answers for .cfa haven't been tampered with on the way. Registration data is published over RDAP and WHOIS (the WHOIS server is whois.nic.cfa).
.cfa FAQ
What country is .cfa?
None. .cfa is a generic top-level domain, so it isn't tied to any country.
Who owns the .cfa domain extension?
CFA Institute operates .cfa as its registry, under a registry agreement with ICANN.
When was .cfa created?
.cfa was delegated to the DNS root zone on May 2, 2015.
Is .cfa a valid domain?
Yes. .cfa is an active top-level domain in the DNS root zone, delegated in 2015, so .cfa addresses work in every browser.
Can I buy a .cfa domain?
No. .cfa is a brand TLD under ICANN Specification 13, so names are reserved for CFA Institute.
Is .cfa DNSSEC-signed?
Yes, the root zone holds a DS record for .cfa.
Sources
Data from IANA root zone version 2026102000. Last changed October 14, 2026. Spotted something wrong? Tell us.