Daily zone census · newest day

111,344 domains were born on Monday, October 19, 2026

What appeared in the DNS zones, what was behind each new name by the end of its first day, and which ones look like trouble. Updated every day. Browse the flagged list · Read the report

111,344

domains appeared

85,144

domains left the zone

15.6%

had a live website by day's end

572

flagged high or critical

On Monday, October 19, 2026 the census compared 1,062 zone files holding 78,608,396 domains against the day before. 111,344 names were new (0.142% of the universe), 85,144 were gone, net +26,200. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it.

New domains per day

Sep 1Oct 19

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

Active website17,407 15.6%
Parked or for sale1,708 1.5%
Registered, no site yet18,467 16.6%
Nothing there at all32,573 29.3%
Couldn't tell41,189 37.0%

What the 17,407 live sites are about

Unclassified5,457 · 31.3%

Hosting & domains2,970 · 17.1%

Gambling & casino1,146 · 6.6%

E-commerce & retail989 · 5.7%

SaaS & tech790 · 4.5%

Crypto Web3605 · 3.5%

AI software507 · 2.9%

Gaming449 · 2.6%

Blogs & personal428 · 2.5%

Education366 · 2.1%

Streaming Piracy343 · 2.0%

Construction Trades322 · 1.8%

Where the new names landed

TLD	Born	Gone	Flagged /1k
.top	14,835	10,585	2.2
.shop	13,713	13,868	0.9
.xyz	7,817	3,545	4.2
.online	7,763	6,062	2.1
.org	6,632	7,352	2.1
.app	4,742	1,273	1.1
.site	4,457	3,020	5.6
.tech	4,115	697	2.7
.store	4,080	4,239	3.7
.info	2,677	4,760	4.1
.club	2,501	614	0.4
.vip	2,171	1,988	3.7
.pro	1,834	1,475	1.6
.cyou	1,688	959	7.1
.click	1,571	1,531	4.5
.space	1,513	1,144	1.3
.study	1,484	3	0.0
.baby	1,468	51	1.4
.live	1,357	822	4.4
.dev	1,330	435	2.3
.best	1,191	120	0.0
.cfd	1,168	471	7.7
.fun	994	771	11.1
.sbs	970	1,025	4.1
.asia	939	580	4.3

Top 25 of 515 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-10-19.

Who is parking them

Dan652

Atom128

Sav91

Sedo66

NameBright60

Domeneshop15

Epik3

Fabulous1

What the live sites are built with

Vercel1,521

WordPress1,109

Next.js68

Wix51

Shopify42

Squarespace36

Webflow13

GitHub Pages13

Drupal3

Joomla2

Writing system of the live sites

latin14,911

han1,085

cyrillic669

arabic264

thai232

hangul125

bengali36

hiragana34

How old the departed names were

1–2 years347

2–5 years30

6–30 days3

1–3 months1

over 5 years8

3–12 months4

0–5 days (add-grace return)4

~1 year (first renewal lapse)120

Risk signals

Every one of the 243,951 births was scored on its name, its nameservers and registrar, and the page it served. 6,937 scored at all; 36 critical, 536 high, 1,641 medium, 4,724 low. The top 300 were screenshotted and shown to a model, which called 114 of them phishing, scam or abuse and 157 benign.

TLDs with the most flagged births per 1,000

.wiki58.6 · 21 of 324

.cam45.1 · 6 of 133

.win16 · 5 of 312

.beauty12.3 · 2 of 162

.mom12.3 · 2 of 163

.buzz11.9 · 6 of 336

.fun11.1 · 12 of 994

.icu10.3 · 5 of 484

.digital10.2 · 2 of 197

.news9.9 · 2 of 101

Signals that fired most

TLD with a high abuse rate1,080

brand in page title, not in the name777

punycode name681

brand in the name585

brand name at a retail registrar557

form on a brand-styled page468

brand name behind Cloudflare213

brand name at a watch-list registrar181

lure words (login, verify, secure…)105

one-letter brand typo100

brand plus digits81

identical page on many newborns79

Brands most often echoed in new names

whatsapp98

roblox40

icloud37

tiktok33

amazon30

binance23

gmail20

google20

tmobile19

facebook19

rakuten17

vanguard17

Registrars of flagged names

NameCheap, Inc.135

HOSTINGER operations, UAB116

Spaceship, Inc.114

GoDaddy.com, LLC76

Cloudflare, Inc.75

GKG.Net, Inc.67

Dynadot Inc50

NameSilo, LLC42

Name.com, Inc.41

Key-Systems GmbH31

Nameserver providers of flagged names

cloudflare.com1,111

dns-parking.com127

xundns.com84

registrar-servers.com72

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaladamforstripe.comscore 81echoes stripe· active website

brand in the name “stripe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”page impersonates a brand “PayPal”+1 more

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalmetamaskdpor.xyzscore 81echoes metamask· active website

brand in the name “metamask”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “MetaMask”+1 more

Model opinion: looks like phishing (target: MetaMask), confidence 95%. An opinion, not a finding.

Criticalnvidiainvest.onlinescore 77echoes nvidia· active website

brand in the name “nvidia”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “nvidia”+1 more

Model opinion: looks like a scam (target: NVIDIA), confidence 82%. An opinion, not a finding.

Criticalquickbooksupport.techscore 71echoes quickbooks· active website

brand in the name “quickbooks”lure words (login, verify, secure…) “support”brand name and brand-styled page “quickbooks”

Model opinion: looks like abuse (target: Intuit (QuickBooks)), confidence 77%. An opinion, not a finding.

Criticalrobloxexploits.lolscore 71echoes roblox· active website

brand in the name “roblox”TLD with a high abuse rate “lol”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalmoblox.xyzscore 70echoes roblox· active website

one-letter brand typo “moblox≈roblox”TLD with a high abuse rate “xyz”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks like phishing (target: Roblox), confidence 77%. An opinion, not a finding.

Criticalmybdate.funscore 68· active website

TLD with a high abuse rate “fun”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Criticalncfak.xyzscore 68· active website

TLD with a high abuse rate “xyz”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Criticalsendbulkmessages.comscore 68· active website

page asks for credentials “Sign In To Your Account”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Criticalshop-ping.orgscore 68· active website

page asks for credentials “Sign in to your account”brand in page title, not in the name “lazada”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Lazada), confidence 92%. An opinion, not a finding.

Criticaltabikenn.buzzscore 68· active website

TLD with a high abuse rate “buzz”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalneo-cloud.cloudscore 66echoes icloud· active website

one-letter brand typo “cloud≈icloud”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Criticalchopaforest-roblox.wikiscore 65echoes roblox· active website

brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Criticalscrooms-roblox.wikiscore 65echoes roblox· active website

brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Criticaladopenai.topscore 64echoes openai· active website

brand in the name “openai”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “chatgpt”

Model opinion: looks like abuse (target: OpenAI), confidence 72%. An opinion, not a finding.

See all 572 high and critical rows for 2026-10-19

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.