Daily zone census

144,975 domains were born on Tuesday, September 1, 2026

144,975
domains appeared
149,255
domains left the zone
19.8%
had a live website by day's end
789
flagged high or critical

On Tuesday, September 1, 2026 the census compared 1,052 zone files holding 75,881,026 domains against the day before. 144,975 names were new (0.191% of the universe), 149,255 were gone, net -4,280. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Aug 20Sep 2

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website28,720 19.8%
  • Parked or for sale3,175 2.2%
  • Registered, no site yet26,254 18.1%
  • Nothing there at all51,291 35.4%
  • Couldn't tell35,535 24.5%

What the 28,720 live sites are about

Unclassified8,945 · 31.1%
Gambling & casino3,406 · 11.9%
E-commerce & retail3,076 · 10.7%
Hosting & domains2,858 · 10.0%
Blogs & personal1,044 · 3.6%
SaaS & tech982 · 3.4%
Gaming654 · 2.3%
Adult595 · 2.1%
Construction Trades549 · 1.9%
Corporate services536 · 1.9%
Real estate531 · 1.8%
Crypto Web3530 · 1.8%

Where the new names landed

TLDBornGoneFlagged /1k
.top18,7019,0112.4
.online10,9985,1692.1
.org9,8315,7711.6
.xyz8,88568,6835.7
.shop8,84111,4761.7
.site6,4502,7992.5
.cfd6,2511,0293.7
.info5,6314,8881.8
.store4,8424,7202.3
.vip4,6602,8830.9
.asia4,2917330.5
.app3,6511,2701.9
.click3,3002,0335.8
.casino2,768550.7
.pro2,5011,7730.8
.lol1,87645920.8
.live1,7901,5062.2
.cyou1,7371,6181.2
.sbs1,7252,1796.4
.space1,6586814.2
.icu1,6051,0869.3
.digital1,3362662.2
.one1,3112672.3
.cloud1,2615482.4
.fun1,1147906.3

Top 25 of 511 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-09-01.

Who is parking them

Dan2,068
Atom94
Sav93
NameBright53
Domeneshop33
Sedo10
Afternic6
Epik2

What the live sites are built with

WordPress3,495
Vercel1,674
Shopify306
Wix127
Squarespace107
Next.js58
Webflow28
Joomla27
Drupal21
GitHub Pages8

Writing system of the live sites

latin24,829
han1,469
cyrillic1,085
thai582
arabic300
hangul249
hiragana63
katakana48

How old the departed names were

1–2 years202
2–5 years338
6–30 days12
1–3 months6
over 5 years18
3–12 months9
0–5 days (add-grace return)12
~1 year (first renewal lapse)90

Risk signals

Every one of the 315,638 births was scored on its name, its nameservers and registrar, and the page it served. 12,278 scored at all; 46 critical, 743 high, 1,999 medium, 9,490 low. The top 300 were screenshotted and shown to a model, which called 166 of them phishing, scam or abuse and 87 benign.

TLDs with the most flagged births per 1,000

.lol20.8 · 40 of 1,876
.help11.8 · 6 of 422
.wiki9.9 · 14 of 708
.icu9.3 · 16 of 1,605
.cam8.2 · 6 of 609
.cash7.6 · 1 of 131
.hair7.5 · 1 of 134
.rest7.3 · 2 of 274
.sbs6.4 · 11 of 1,725
.fun6.3 · 7 of 1,114

Signals that fired most

brand in page title, not in the name1,453
TLD with a high abuse rate1,295
brand name at a retail registrar857
brand in the name677
form on a brand-styled page573
brand name at a watch-list registrar364
punycode name314
brand name behind Cloudflare251
lure words (login, verify, secure…)183
one-letter brand typo182
identical page on many newborns144
page impersonates a brand121

Brands most often echoed in new names

whatsapp117
icloud64
amazon40
google31
binance31
tmobile28
vanguard22
revolut21
telegram20
ebay18
gmail18
tiktok18

Registrars of flagged names

Dynadot Inc322
NameCheap, Inc.261
HOSTINGER operations, UAB204
Spaceship, Inc.173
NameSilo, LLC122
Guizhou Zhongyu Zhike Network Technology Co., Ltd.100
GoDaddy.com, LLC98
Name.com, Inc.86
Cloudflare, Inc.85
Porkbun LLC75

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaldocs-sign.orgscore 100echoes docusign· active website
one-letter brand typodocssign≈docusignbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UABpage asks for credentialsverify your identity+1 more

Model opinion: looks like phishing (target: Microsoft), confidence 97%. An opinion, not a finding.

Criticalcloud-find.xyzscore 96echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Criticaldispositive-cloud.xyzscore 96echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Criticalforget-cloud.xyzscore 96echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Criticallocalizated-cloud.xyzscore 96echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more

Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.

Criticallocation-cloud.xyzscore 96echoes icloud· active website
one-letter brand typocloud≈icloudTLD with a high abuse ratexyzbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Criticaltesla-ai.topscore 87echoes tesla· active website
ambiguous brand wordteslaTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.+4 more

Model opinion: looks like a scam (target: Tesla), confidence 94%. An opinion, not a finding.

Criticalstarlink4dyes.topscore 86echoes starlink· active website
brand in the namestarlinkbrand plus digitsstarlink4dyesTLD with a high abuse ratetopfree DNS providerdnsowl.com+3 more

Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.

Criticaltest4wordpress.comscore 85echoes wordpress· active website
brand in the namewordpressbrand plus digitstest4wordpressbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB+2 more

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Criticalstarlink4don.topscore 84echoes starlink· active website
brand in the namestarlinkbrand plus digitsstarlink4donTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.com+3 more

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticalselloresroblox.wikiscore 83echoes roblox· active website
brand in the namerobloxbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.+2 more

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalrobinhoodcat.vipscore 81echoes robinhood· active website
brand in the namerobinhoodbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.page impersonates a brandMetaMask+1 more

Model opinion: looks like a scam, confidence 63%. An opinion, not a finding.

Criticalarame.sitescore 80echoes aramex· active website
one-letter brand typoarame≈aramexbrand name behind Cloudflarecloudflare.combrand name at a retail registrarWest263 International Limitedbrand in page title, not in the namenationwide+1 more

Model opinion: looks like phishing (target: Joe Gambino's Bakery), confidence 60%. An opinion, not a finding.

Criticalgrandblueroblox.wikiscore 77echoes roblox· active website
brand in the namerobloxbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.brand name and brand-styled pageroblox+1 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticalstarlinkcepat.topscore 76echoes starlink· active website
brand in the namestarlinkTLD with a high abuse ratetopbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo,LLC+2 more

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

See all 789 high and critical rows for 2026-09-01

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.