Daily zone census

195,305 domains were born on Tuesday, September 8, 2026

195,305
domains appeared
89,777
domains left the zone
11.8%
had a live website by day's end
800
flagged high or critical

On Tuesday, September 8, 2026 the census compared 1,052 zone files holding 76,127,500 domains against the day before. 195,305 names were new (0.257% of the universe), 89,777 were gone, net +105,528. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Aug 20Sep 22

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website23,072 11.8%
  • Parked or for sale2,474 1.3%
  • Registered, no site yet27,253 14.0%
  • Nothing there at all45,272 23.2%
  • Couldn't tell97,234 49.8%

What the 23,072 live sites are about

Unclassified7,166 · 31.1%
E-commerce & retail2,520 · 10.9%
Hosting & domains2,086 · 9.0%
Gambling & casino1,987 · 8.6%
SaaS & tech916 · 4.0%
Construction Trades673 · 2.9%
Gaming610 · 2.6%
Blogs & personal603 · 2.6%
Corporate services545 · 2.4%
AI software521 · 2.3%
Real estate505 · 2.2%
Education503 · 2.2%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz58,2984,4091.1
.top19,13511,1162.0
.shop11,2049,5180.9
.online10,0886,2602.4
.org9,7476,0742.4
.site6,6573,6443.3
.info6,2934,9551.7
.cam5,7532322.1
.store5,3944,1532.8
.vip3,7841,9450.5
.click3,52295210.2
.app3,4391,2410.3
.cfd3,3711,7523.9
.pro2,8092,4092.8
.sbs2,7302,73114.3
.icu1,9691,0032.5
.lol1,90489811.6
.space1,6477412.4
.digital1,6193054.3
.cyou1,4679670.7
.live1,4441,0199.0
.dev1,3313960.0
.asia1,2057580.8
.world1,1859681.7
.cloud1,1835351.7

Top 25 of 507 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-09-08.

Who is parking them

Dan1,063
Sedo151
Atom113
Sav111
NameBright48
Domeneshop41
Epik5

What the live sites are built with

WordPress2,882
Vercel1,875
Shopify280
Wix82
Squarespace82
Next.js69
Drupal10
GitHub Pages10
Webflow9
Joomla6

Writing system of the live sites

latin19,876
han1,442
cyrillic836
arabic278
thai230
hangul175
hiragana77
bengali38

How old the departed names were

1–2 years878
2–5 years49
6–30 days116
1–3 months65
over 5 years17
3–12 months199
0–5 days (add-grace return)9
~1 year (first renewal lapse)93

Risk signals

Every one of the 370,723 births was scored on its name, its nameservers and registrar, and the page it served. 11,571 scored at all; 36 critical, 764 high, 1,929 medium, 8,842 low. The top 300 were screenshotted and shown to a model, which called 149 of them phishing, scam or abuse and 100 benign.

TLDs with the most flagged births per 1,000

.win39 · 14 of 359
.email26.7 · 4 of 150
.beauty19 · 2 of 105
.sbs14.3 · 40 of 2,730
.fun13.5 · 15 of 1,114
.homes12.3 · 4 of 324
.lol11.6 · 22 of 1,904
.help11.5 · 6 of 520
.best10.3 · 3 of 291
.click10.2 · 42 of 3,522

Signals that fired most

brand in page title, not in the name1,255
TLD with a high abuse rate1,116
brand name at a retail registrar691
brand in the name663
form on a brand-styled page509
nameserver domain born the same day362
brand name at a watch-list registrar304
brand name behind Cloudflare276
punycode name211
one-letter brand typo173
lure words (login, verify, secure…)150
identical page on many newborns143

Brands most often echoed in new names

icloud60
gmail40
amazon40
tiktok40
google36
tmobile30
roblox28
binance28
facebook27
telegram25
ebay24
robinhood24

Registrars of flagged names

NameSilo, LLC433
NameCheap, Inc.292
Dynadot Inc177
HOSTINGER operations, UAB155
GoDaddy.com, LLC118
Spaceship, Inc.102
Name.com, Inc.93
Cloudflare, Inc.69
Porkbun LLC52
NICENIC INTERNATIONAL GROUP CO., LIMITED49

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalicloud-find1323.lifescore 84echoes icloud· active website
brand in the name “icloud”brand plus digits “icloud-find1323”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “PayPal”+1 more

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Criticalworkdayreset.shopscore 77echoes workday· active website
brand in the name “workday”lure words (login, verify, secure…) “reset”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “workday”

Model opinion: looks benign, confidence 87%. An opinion, not a finding.

Criticalinstagramikeskus.wikiscore 70echoes instagram· active website
brand in the name “instagram”brand name on a rarely-seen nameserver “speedydns.net”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more

Model opinion: looks like abuse (target: Instagram), confidence 65%. An opinion, not a finding.

Criticalpiratebay.wtfscore 70echoes ebay· active website
brand in the name “ebay”page impersonates a brand “Microsoft 365”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Criticalbdtopsmm.comscore 68· active website
page asks for credentials “Sign in to Your Account”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticalhdhub4.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 94%. An opinion, not a finding.

Criticalteresamendoza.onlinescore 68· active website
page asks for credentials “Sign in to your account”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticaleverydaytrack.orgscore 66· active website
lure words (login, verify, secure…) “track”page impersonates a brand “FedEx”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalnetflixvpn.clickscore 66echoes netflix· active website
brand in the name “netflix”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “Netflix”

Model opinion: looks like abuse (target: Netflix), confidence 72%. An opinion, not a finding.

Criticalsaberitsupport.comscore 66· active website
lure words (login, verify, secure…) “support”page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Criticaluninswap.sitescore 66echoes uniswap· active website
one-letter brand typo “uninswap≈uniswap”brand in page title, not in the name “uniswap”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Uniswap), confidence 68%. An opinion, not a finding.

Criticalverilon.proscore 66echoes verizon· active website
one-letter brand typo “verilon≈verizon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalxizuho.worldscore 66echoes mizuho· active website
one-letter brand typo “xizuho≈mizuho”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: suspicious, confidence 48%. An opinion, not a finding.

Criticalanimediceroblox.wikiscore 65echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Criticalreheadspleaseroblox.wikiscore 65echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

See all 800 high and critical rows for 2026-09-08

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.