Daily zone census

159,729 domains were born on Sunday, September 6, 2026

159,729
domains appeared
105,192
domains left the zone
14.3%
had a live website by day's end
685
flagged high or critical

On Sunday, September 6, 2026 the census compared 1,052 zone files holding 75,958,703 domains against the day before. 159,729 names were new (0.210% of the universe), 105,192 were gone, net +54,537. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Aug 20Sep 20

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website22,820 14.3%
  • Parked or for sale3,274 2.0%
  • Registered, no site yet18,646 11.7%
  • Nothing there at all39,657 24.8%
  • Couldn't tell75,332 47.2%

What the 22,820 live sites are about

Unclassified7,052 · 30.9%
Hosting & domains2,760 · 12.1%
Gambling & casino2,588 · 11.3%
E-commerce & retail1,918 · 8.4%
SaaS & tech1,069 · 4.7%
Gaming854 · 3.7%
Blogs & personal612 · 2.7%
Adult595 · 2.6%
Streaming Piracy553 · 2.4%
AI software454 · 2.0%
Real estate400 · 1.8%
Construction Trades350 · 1.5%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz61,86510,7901.4
.top14,27216,2502.6
.shop7,9468,7561.8
.online7,6735,4093.4
.app6,7063,1591.9
.org6,4196,2722.0
.site6,0903,8642.1
.store4,3234,5653.2
.asia3,3967980.9
.vip2,9963,1791.7
.info2,7265,8352.6
.lol1,8411,21228.2
.dev1,6725331.8
.boats1,614280.6
.space1,3169703.0
.biz1,2636570.8
.click1,1191,18110.7
.icu1,08995510.1
.pro1,0242,4122.0
.sbs1,0043,0936.0
.live9931,3900.0
.cyou9667836.2
.tech9056082.2
.fun87597821.7
.cloud8406233.6

Top 25 of 499 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-09-06.

Who is parking them

Dan1,693
Atom146
Sav85
NameBright36
Sedo29
Domeneshop21
Afternic7
Epik5
Voodoo1

What the live sites are built with

WordPress2,449
Vercel1,931
Shopify249
Squarespace72
Next.js64
Wix62
GitHub Pages7
Webflow6
Joomla5
Drupal3

Writing system of the live sites

latin20,092
han1,200
cyrillic725
arabic314
thai224
hangul113
hiragana40
bengali37

How old the departed names were

1–2 years286
2–5 years651
6–30 days2
1–3 months3
over 5 years10
3–12 months5
0–5 days (add-grace return)3
~1 year (first renewal lapse)73

Risk signals

Every one of the 294,249 births was scored on its name, its nameservers and registrar, and the page it served. 11,059 scored at all; 27 critical, 658 high, 1,731 medium, 8,643 low. The top 300 were screenshotted and shown to a model, which called 152 of them phishing, scam or abuse and 105 benign.

TLDs with the most flagged births per 1,000

.cam32.8 · 14 of 427
.global31.8 · 5 of 157
.lol28.2 · 53 of 1,841
.fun21.7 · 20 of 875
.help20.9 · 6 of 287
.digital18.9 · 4 of 212
.win16.7 · 5 of 300
.wiki12.3 · 10 of 649
.click10.7 · 12 of 1,119
.icu10.1 · 12 of 1,089

Signals that fired most

brand in page title, not in the name1,092
TLD with a high abuse rate993
brand in the name848
brand name at a retail registrar830
form on a brand-styled page548
punycode name220
brand name behind Cloudflare196
brand name at a watch-list registrar170
one-letter brand typo144
lure words (login, verify, secure…)125
identical page on many newborns111
brand plus digits70

Brands most often echoed in new names

whatsapp397
icloud61
binance33
tiktok29
roblox23
amazon22
cashapp22
tmobile21
gmail18
google18
ebay17
robinhood17

Registrars of flagged names

Guizhou Zhongyu Zhike Network Technology Co., Ltd.323
Dynadot Inc181
NameCheap, Inc.178
HOSTINGER operations, UAB164
Spaceship, Inc.157
Name.com, Inc.84
GoDaddy.com, LLC84
NameSilo, LLC71
Cloudflare, Inc.71
NICENIC INTERNATIONAL GROUP CO., LIMITED54

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticaldocusigner.onlinescore 100echoes docusign· active website
brand in the name “docusign”page asks for credentials “Sign in to your account”brand name and brand-styled page “docusign”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalvanguardnet.appscore 100echoes vanguard· active website
brand in the name “vanguard”brand name on a rarely-seen nameserver “shockhosting.com”page asks for credentials “Log in to your account”brand in page title, not in the name “xbox”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalcashappweb.cashscore 81echoes cashapp· active website
brand in the name “cashapp”brand name behind Cloudflare “cloudflare.com”page asks for credentials “confirm your payment”

Model opinion: looks like phishing (target: Cash App (Block, Inc.)), confidence 82%. An opinion, not a finding.

Criticaltrustwalletinsurance.supportscore 80echoes trustwallet· active website
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Trust Wallet), confidence 82%. An opinion, not a finding.

Criticalforsakenroblox.wikiscore 77echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “roblox”+1 more

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Criticalrobinhoodpools.lolscore 77echoes robinhood· active website
brand in the name “robinhood”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “robinhood”+1 more

Model opinion: suspicious (target: Robinhood), confidence 55%. An opinion, not a finding.

Criticaltiktok-rn.icuscore 77echoes tiktok· active website
brand in the name “tiktok”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”+1 more

Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.

Criticaljustacoinonrobinhood.funscore 75echoes robinhood· active website
brand in the name “robinhood”TLD with a high abuse rate “fun”page impersonates a brand “coinbase”brand name and brand-styled page “robinhood”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalopenaione1.vipscore 70echoes openai· active website
brand in the name “openai”brand plus digits “openaione1”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”+1 more

Model opinion: looks like a scam (target: OpenAI), confidence 85%. An opinion, not a finding.

Criticallaststoproblox.wikiscore 69echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Criticaltiktoksignal.comscore 69echoes tiktok· active website
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Criticalchatgptbd.onlinescore 68echoes chatgpt· active website
brand in the name “chatgpt”brand in page title, not in the name “openai”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: OpenAI), confidence 93%. An opinion, not a finding.

Criticalrobloxcheaty.onlinescore 65echoes roblox· active website
brand in the name “roblox”brand name on a rarely-seen nameserver “mydevil.net”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks like abuse (target: Roblox), confidence 78%. An opinion, not a finding.

Criticaltiktoksavvy.appscore 63echoes tiktok· active website
brand in the name “tiktok”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalvanguardsoft.appscore 63echoes vanguard· active website
brand in the name “vanguard”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

See all 685 high and critical rows for 2026-09-06

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.