Daily zone census

96,773 domains were born on Sunday, August 30, 2026

96,773

domains appeared

101,003

domains left the zone

20.9%

had a live website by day's end

624

flagged high or critical

On Sunday, August 30, 2026 the census compared 1,052 zone files holding 75,903,290 domains against the day before. 96,773 names were new (0.127% of the universe), 101,003 were gone, net -4,230. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Aug 20Sep 2

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

Active website20,179 20.9%
Parked or for sale2,636 2.7%
Registered, no site yet17,923 18.5%
Nothing there at all30,772 31.8%
Couldn't tell25,263 26.1%

What the 20,179 live sites are about

Unclassified5,964 · 29.6%

Gambling & casino3,235 · 16.0%

E-commerce & retail2,239 · 11.1%

Hosting & domains1,817 · 9.0%

SaaS & tech910 · 4.5%

Gaming553 · 2.7%

Adult477 · 2.4%

Blogs & personal433 · 2.1%

Construction Trades425 · 2.1%

AI software389 · 1.9%

Real estate328 · 1.6%

Corporate services295 · 1.5%

Where the new names landed

TLD	Born	Gone	Flagged /1k
.top	13,928	15,269	3.4
.org	7,469	6,129	2.0
.shop	6,790	12,132	2.9
.online	6,615	5,923	2.9
.app	6,119	2,062	2.6
.site	5,913	3,497	1.9
.xyz	4,631	13,723	7.1
.store	4,306	4,184	3.5
.info	3,539	5,659	1.7
.vip	2,558	1,658	0.8
.lol	1,708	422	43.9
.click	1,450	1,934	4.8
.cfd	1,385	905	2.2
.live	1,213	1,240	8.2
.pro	1,139	2,088	0.9
.biz	1,130	594	2.7
.space	1,073	1,094	4.7
.cloud	1,025	574	2.0
.icu	1,003	875	8.0
.dev	990	333	1.0
.asia	849	802	3.5
.sbs	825	1,313	18.2
.fun	808	712	13.6
.tech	766	716	1.3
.club	722	601	0.0

Top 25 of 506 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-08-30.

Who is parking them

Dan1,436

Sav80

NameBright79

Atom40

Sedo25

Domeneshop13

Epik7

Afternic2

What the live sites are built with

WordPress2,119

Vercel1,667

Shopify241

Next.js72

Wix64

Squarespace57

GitHub Pages9

Webflow6

Linktree4

Drupal3

Writing system of the live sites

latin17,515

han888

cyrillic743

thai384

arabic331

hangul153

hebrew39

bengali39

How old the departed names were

1–2 years840

2–5 years74

6–30 days24

1–3 months2

over 5 years23

3–12 months11

0–5 days (add-grace return)4

~1 year (first renewal lapse)134

Risk signals

Every one of the 223,588 births was scored on its name, its nameservers and registrar, and the page it served. 6,707 scored at all; 25 critical, 599 high, 1,253 medium, 4,830 low. The top 300 were screenshotted and shown to a model, which called 142 of them phishing, scam or abuse and 114 benign.

TLDs with the most flagged births per 1,000

.lol43.9 · 75 of 1,708

.bid19.8 · 2 of 101

.sbs18.2 · 16 of 825

.fun13.6 · 11 of 808

.homes11.5 · 3 of 262

.cam10 · 3 of 300

.bio9.6 · 1 of 104

.ltd9.3 · 1 of 107

.cyou9.2 · 6 of 655

.lat8.7 · 4 of 458

Signals that fired most

brand in page title, not in the name961

TLD with a high abuse rate922

brand name at a retail registrar546

form on a brand-styled page452

brand in the name430

punycode name287

brand name at a watch-list registrar243

brand name behind Cloudflare149

lure words (login, verify, secure…)116

one-letter brand typo111

brand plus digits95

identical page on many newborns83

Brands most often echoed in new names

icloud46

tiktok30

shopify23

google21

booking20

amazon19

binance18

gmail17

tmobile15

roblox13

robinhood12

wordpress12

Registrars of flagged names

Dynadot Inc266

HOSTINGER operations, UAB167

NameCheap, Inc.150

Spaceship, Inc.131

GoDaddy.com, LLC94

Name.com, Inc.73

Cloudflare, Inc.69

NICENIC INTERNATIONAL GROUP CO., LIMITED66

NameSilo, LLC59

NameSilo,LLC55

Nameserver providers of flagged names

cloudflare.com784

dns-parking.com136

mismes.com90

registrar-servers.com88

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalrobinhoodaiagent.storescore 77echoes robinhood· active website

brand in the name “robinhood”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “robinhood”+1 more

Model opinion: looks like phishing (target: Robinhood), confidence 87%. An opinion, not a finding.

Criticaltiktokbid.livescore 71echoes tiktok· active website

brand in the name “tiktok”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Criticaltiktokvideodownload.livescore 71echoes tiktok· active website

brand in the name “tiktok”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Criticalgooglewalletextension.comscore 70echoes google· active website

brand in the name “google”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Fewmoretaps OU d/b/a Trustname.com”

Model opinion: looks like phishing (target: Google Chrome Web Store / IOTA Foundation), confidence 93%. An opinion, not a finding.

Criticaldoc-sign.livescore 68echoes docusign· active website

one-letter brand typo “docsign≈docusign”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+1 more

Model opinion: looks like abuse (target: DocuSign), confidence 85%. An opinion, not a finding.

Criticaljobs-for-google.comscore 68echoes google· active website

brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more

Model opinion: looks like phishing (target: Google), confidence 85%. An opinion, not a finding.

Criticalslackdaddy.orgscore 68echoes slack· active website

brand in the name “slack”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Criticalanimash-roblox.wikiscore 65echoes roblox· active website

brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Criticalebayyupoo.shopscore 63echoes ebay· active website

brand in the name “ebay”brand name and brand-styled page “ebay”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: eBay), confidence 78%. An opinion, not a finding.

Criticalbestbuyhelp.livescore 62echoes bestbuy· active website

brand in the name “bestbuy”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Best Buy), confidence 97%. An opinion, not a finding.

Criticalhsbcollection.storescore 62echoes hsbc· active website

brand in the name “hsbc”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalrobloxbalance.onlinescore 62echoes roblox· active website

brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Roblox), confidence 94%. An opinion, not a finding.

Criticalrysesuppiemnetsy.shopscore 62echoes etsy· active website

brand in the name “etsy”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: RYSE Supplements), confidence 85%. An opinion, not a finding.

Critical4kpandora.onlinescore 60· active website

page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.

Critical4kpandoranl.shopscore 60· active website

page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 93%. An opinion, not a finding.

See all 624 high and critical rows for 2026-08-30

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.