Comment by ethan_smith

They likely use a batch API or maintain a local cache of recently checked domains, combined with prefix/suffix filtering against a pre-computed availability database rather than doing individual RDAP/WHOIS lookups for every possible combination.