Daily zone census

201,165 domains were born on Friday, September 4, 2026

201,165
domains appeared
156,978
domains left the zone
15.6%
had a live website by day's end
1,127
flagged high or critical

On Friday, September 4, 2026 the census compared 1,052 zone files holding 75,861,702 domains against the day before. 201,165 names were new (0.265% of the universe), 156,978 were gone, net +44,187. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Aug 20Sep 18

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website31,292 15.6%
  • Parked or for sale3,481 1.7%
  • Registered, no site yet22,575 11.2%
  • Nothing there at all57,088 28.4%
  • Couldn't tell86,729 43.1%

What the 31,292 live sites are about

Unclassified9,135 · 29.2%
Gambling & casino4,238 · 13.5%
Hosting & domains3,323 · 10.6%
E-commerce & retail2,733 · 8.7%
SaaS & tech1,272 · 4.1%
Blogs & personal1,020 · 3.3%
Gaming787 · 2.5%
AI software754 · 2.4%
Corporate services732 · 2.3%
Adult652 · 2.1%
Construction Trades619 · 2.0%
Real estate616 · 2.0%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz69,08753,2394.2
.top21,02422,1372.7
.online10,09810,4124.1
.shop10,08812,6881.1
.org10,0746,9232.3
.site7,1924,4852.5
.store5,5274,8753.3
.info5,3597,6652.6
.cyou4,6065541.7
.app4,3181,0983.5
.vip3,8212,5021.3
.dev3,1068711.9
.asia2,6086460.0
.click2,2001,12610.0
.pro2,1911,7542.3
.space1,9241,0503.6
.lol1,8713968.6
.icu1,8471,11413.0
.biz1,8396572.2
.live1,5681,1677.7
.sbs1,4981,2894.7
.tech1,1356265.3
.cloud1,0465832.9
.fun99276113.1
.cfd95991212.5

Top 25 of 525 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-09-04.

Who is parking them

Dan1,449
Atom108
Sav102
NameBright67
Sedo60
Domeneshop29
Epik4
Voodoo1
Fabulous1

What the live sites are built with

WordPress3,663
Vercel1,947
Shopify232
Wix139
Next.js113
Squarespace105
Webflow41
Joomla34
Drupal29
GitHub Pages10

Writing system of the live sites

latin27,437
han1,639
cyrillic934
thai477
arabic298
hangul199
greek78
bengali76

How old the departed names were

1–2 years276
2–5 years11
6–30 days1
over 5 years22
3–12 months6
0–5 days (add-grace return)3
~1 year (first renewal lapse)77

Risk signals

Every one of the 377,822 births was scored on its name, its nameservers and registrar, and the page it served. 12,462 scored at all; 47 critical, 1,080 high, 1,779 medium, 9,556 low. The top 300 were screenshotted and shown to a model, which called 145 of them phishing, scam or abuse and 91 benign.

TLDs with the most flagged births per 1,000

.help20.5 · 8 of 293
.cam18 · 10 of 499
.work17.2 · 9 of 522
.fun13.1 · 16 of 992
.icu13 · 26 of 1,847
.cfd12.5 · 13 of 959
.run12.1 · 2 of 165
.win10.7 · 4 of 375
.click10 · 23 of 2,200
.ink9.3 · 5 of 432

Signals that fired most

TLD with a high abuse rate1,372
brand in page title, not in the name1,346
brand name at a retail registrar1,146
brand in the name897
form on a brand-styled page583
brand name at a watch-list registrar363
brand name behind Cloudflare347
punycode name344
one-letter brand typo245
lure words (login, verify, secure…)200
identical page on many newborns150
brand plus digits145

Brands most often echoed in new names

icloud154
cashapp93
usps68
binance44
robinhood39
google36
ebay34
tiktok34
tmobile27
vanguard26
revolut21
zelle20

Registrars of flagged names

Dynadot Inc274
NameCheap, Inc.269
GMO Internet Group, Inc. d/b/a Onamae.com256
HOSTINGER operations, UAB208
GoDaddy.com, LLC178
Cloudflare, Inc.141
Spaceship, Inc.128
NameSilo, LLC117
NameSilo,LLC95
Name.com, Inc.91

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaladobereaderupgradingservices.onlinescore 100echoes adobe· active website
brand in the name “adobe”lure words (login, verify, secure…) “service,services”very long name “28”brand name at a retail registrar “NameCheap, Inc.”+2 more

Model opinion: looks like abuse (target: Adobe), confidence 76%. An opinion, not a finding.

Criticalpaypal-login-secure.helpscore 100echoes paypal· active website
brand in the name “paypal”lure words (login, verify, secure…) “login,secure”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+4 more

Model opinion: looks like phishing (target: PayPal), confidence 98%. An opinion, not a finding.

Criticalbybitalert.bidscore 96echoes bybit· active website
brand in the name “bybit”lure words (login, verify, secure…) “alert”TLD with a high abuse rate “bid”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticalcoinbase-help.onlinescore 92echoes coinbase· active website
brand in the name “coinbase”lure words (login, verify, secure…) “help”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”+1 more

Model opinion: looks like phishing (target: Coinbase), confidence 93%. An opinion, not a finding.

Criticalchatgptaiassistant.bizscore 83echoes chatgpt· active website
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+2 more

Model opinion: looks like a scam (target: OpenAI (ChatGPT)), confidence 92%. An opinion, not a finding.

Criticalrobloxverse.latscore 83echoes roblox· active website
brand in the name “roblox”brand name on a rarely-seen nameserver “zomro.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+2 more

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Criticalshopeesale.clickscore 79echoes shopee· active website
brand in the name “shopee”TLD with a high abuse rate “click”brand name at a retail registrar “MAT BAO CORPORATION”brand name and brand-styled page “shopee”+1 more

Model opinion: looks like abuse (target: Shopee), confidence 58%. An opinion, not a finding.

Criticalmobile-casibomguncelgirisadresi.camscore 78echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”very long name “31”TLD with a high abuse rate “cam”brand name behind Cloudflare “cloudflare.com”+3 more

Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.

Criticalgooglede.orgscore 77echoes google· active website
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Key-Systems GmbH”brand name and brand-styled page “google”+1 more

Model opinion: looks like phishing (target: Google), confidence 62%. An opinion, not a finding.

Criticallinkedintranslator.appscore 77echoes linkedin· active website
brand in the name “linkedin”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CloudFlare, Inc.”brand name and brand-styled page “linkedin”+1 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticaloneroblox.onlinescore 77echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “roblox”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalrobloxcat.onlinescore 76echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “GoDaddy.com, LLC”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: Roblox), confidence 76%. An opinion, not a finding.

Criticalsterling-fondvale.cyouscore 74echoes starling· active website
one-letter brand typo “sterling≈starling”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+2 more

Model opinion: looks like a scam, confidence 87%. An opinion, not a finding.

Criticalmicrosoftbob.funscore 73echoes microsoft· active website
brand in the name “microsoft”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”+2 more

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Criticalcake-development-roblox.storescore 71echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

See all 1,127 high and critical rows for 2026-09-04

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.