Pointing a domain at a holding page, properly

An unused domain that resolves to a plain page saying it is available converts enquiries that a non-resolving name throws away. It is the simplest hosting job there is, and the details that get skipped are the ones visitors actually notice.

The DNS part

An A record on the bare name pointing at whatever serves the page, and a way of handling the www form — either its own record or a wildcard alias covering every subdomain.

Both forms must work. A visitor who types the address with www and gets nothing concludes the name is dead, which is precisely the opposite of the message.

The certificate part

This is where most holding pages fail. Modern browsers try the secure form first, and a name without a valid certificate produces a full-page security warning.

A warning is worse than no page at all. It does not say “this domain is for sale”; it says “something is wrong here”, and a potential buyer forms an impression of the seller in that moment.

Certificates are free and automatable. There is no justification for a holding page without one.

The redirect trap

Some registrars offer a forwarding service that points the name at another URL. Convenient, and it frequently breaks the secure form: the certificate presented belongs to the forwarding provider rather than to your domain, so browsers reject it.

The symptom is deceptive. The insecure form redirects correctly, so a quick check looks fine, while real visitors hitting the secure form see a warning. If you use forwarding, test the secure form specifically, from a browser, not with a tool that ignores certificate errors.

The reliable arrangement is to keep DNS with a provider that issues a certificate for your name, and do the redirect at your own server.

What the page should say

The domain name itself, prominently, so a visitor knows they reached the right place. A plain statement that it is available. One way to make contact. A price, where showing one makes sense.

Keep it a single static page that loads instantly. Nobody arriving at a for-sale page wants a experience; they want to know whether it is available and how to ask.

What it should not say

No fabricated business. No advertising, particularly advertising served automatically — systems that generate ads from the name have a habit of producing ones that reference brands, and that has been treated as evidence in disputes.

And if you serve the same page across many names, make sure each carries its own domain name in the text. A hundred identical pages with nothing distinguishing them is the pattern automated systems read as a portfolio of no substance.

Checking it from outside

Test the four combinations — with and without www, secure and insecure — from a real browser on a network that is not yours. Confirm the insecure form redirects to the secure one rather than serving content, and confirm the certificate names your domain.

Tools that skip certificate verification will tell you everything is fine while every real visitor sees a warning. That is the single most common blind spot in this task.