Daily zone census

184,142 domains were born on Wednesday, September 9, 2026

184,142
domains appeared
100,957
domains left the zone
15.8%
had a live website by day's end
839
flagged high or critical

On Wednesday, September 9, 2026 the census compared 1,053 zone files holding 76,219,189 domains against the day before. 184,142 names were new (0.242% of the universe), 100,957 were gone, net +83,185. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Aug 20Sep 25

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website29,022 15.8%
  • Parked or for sale2,590 1.4%
  • Registered, no site yet27,891 15.1%
  • Nothing there at all38,340 20.8%
  • Couldn't tell86,299 46.9%

What the 29,022 live sites are about

Unclassified9,084 · 31.3%
Gambling & casino3,351 · 11.5%
Hosting & domains3,256 · 11.2%
E-commerce & retail2,828 · 9.7%
Blogs & personal915 · 3.2%
Adult870 · 3.0%
Gaming807 · 2.8%
SaaS & tech681 · 2.3%
Crypto Web3616 · 2.1%
Corporate services607 · 2.1%
Construction Trades595 · 2.1%
AI software552 · 1.9%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz61,00910,1611.0
.top15,77910,2052.3
.shop10,5068,6661.3
.org9,9246,5602.0
.online9,55310,0302.9
.site6,9964,0842.1
.info5,4136,2962.0
.store5,3074,3172.4
.click4,4661,3034.7
.cfd3,9331,1722.5
.vip3,1971,9550.9
.icu2,8282,3405.7
.pro2,8203,0562.5
.sbs2,1112,0926.6
.lol1,97043315.2
.cyou1,8711,2333.2
.space1,7638976.2
.digital1,6193590.0
.live1,5758147.0
.fun1,45988314.4
.cloud1,3315421.5
.tech1,2066022.5
.world8785792.3
.asia8556541.2
.biz8157850.0

Top 25 of 497 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-09-09.

Who is parking them

Dan1,397
Sedo151
Atom120
Sav63
NameBright47
Domeneshop30
Epik3
Efty1

What the live sites are built with

WordPress3,176
Vercel1,634
Shopify284
Squarespace106
Wix105
Next.js60
Webflow19
Drupal12
Joomla9
GitHub Pages8

Writing system of the live sites

latin24,394
han2,500
cyrillic1,097
thai407
arabic289
hangul149
hiragana48
bengali40

How old the departed names were

1–2 years854
2–5 years73
6–30 days42
1–3 months7
over 5 years40
3–12 months16
0–5 days (add-grace return)26
~1 year (first renewal lapse)181

Risk signals

Every one of the 366,065 births was scored on its name, its nameservers and registrar, and the page it served. 9,946 scored at all; 34 critical, 805 high, 1,998 medium, 7,109 low. The top 300 were screenshotted and shown to a model, which called 139 of them phishing, scam or abuse and 110 benign.

TLDs with the most flagged births per 1,000

.ink63.5 · 31 of 488
.mom34.5 · 12 of 261
.lol15.2 · 31 of 1,970
.fun14.4 · 23 of 1,459
.cam11.9 · 8 of 672
.fyi10.8 · 2 of 186
.news10 · 1 of 100
.plus9.8 · 1 of 102
.help9.3 · 5 of 535
.bar9.2 · 1 of 109

Signals that fired most

brand in page title, not in the name1,503
TLD with a high abuse rate1,283
brand name at a retail registrar707
brand in the name633
form on a brand-styled page581
punycode name298
brand name behind Cloudflare288
brand name at a watch-list registrar272
one-letter brand typo209
very long name178
lure words (login, verify, secure…)161
identical page on many newborns138

Brands most often echoed in new names

icloud64
binance44
tmobile37
google35
whatsapp35
americanexpress33
tiktok27
vanguard23
amazon22
coinbase20
chatgpt17
robinhood17

Registrars of flagged names

NameCheap, Inc.232
Spaceship, Inc.204
NameSilo, LLC184
HOSTINGER operations, UAB182
Dynadot Inc157
GoDaddy.com, LLC126
Name.com, Inc.94
Cloudflare, Inc.93
Porkbun LLC87
NICENIC INTERNATIONAL GROUP CO., LIMITED82

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalsupportt-cloud.icuscore 86echoes icloud· active website
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “support”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Criticalservicexfinity.onlinescore 82echoes xfinity· active website
brand in the name “xfinity”lure words (login, verify, secure…) “service”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “wordpress”

Model opinion: looks like abuse (target: Xfinity (Comcast)), confidence 68%. An opinion, not a finding.

Criticalit-cloud-support.onlinescore 78echoes icloud· active website
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “support”brand name on a rarely-seen nameserver “regzone.cz”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticalloginkomunitastiktok.comscore 77echoes tiktok· active website
brand in the name “tiktok”lure words (login, verify, secure…) “login”brand name on a rarely-seen nameserver “cloudhost.id”brand name and brand-styled page “tiktok”

Model opinion: looks like phishing (target: TikTok), confidence 96%. An opinion, not a finding.

Criticaltiktokmall.momscore 77echoes tiktok· active website
brand in the name “tiktok”TLD with a high abuse rate “mom”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”+1 more

Model opinion: looks like phishing (target: TikTok), confidence 93%. An opinion, not a finding.

Criticaltiktokmall.sbsscore 77echoes tiktok· active website
brand in the name “tiktok”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”+1 more

Model opinion: looks like phishing (target: TikTok), confidence 95%. An opinion, not a finding.

Criticaltiktoks.momscore 77echoes tiktok· active website
brand in the name “tiktok”TLD with a high abuse rate “mom”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”+1 more

Model opinion: looks like phishing (target: TikTok), confidence 96%. An opinion, not a finding.

Criticalufor.momscore 74· active website
TLD with a high abuse rate “mom”page asks for credentials “log in to your account”page impersonates a brand “PayPal”login form “has_form+login words”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Criticalinstagrambid.lolscore 71echoes instagram· active website
brand in the name “instagram”TLD with a high abuse rate “lol”brand name and brand-styled page “instagram”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Criticalrobloxdownloadfree.comscore 69echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticalrobloxscripts.orgscore 69echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Criticalshopifythemecheck.comscore 69echoes shopify· active website
brand in the name “shopify”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “shopify”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Criticaltitik-tok.latscore 69echoes tiktok· active website
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: TikTok), confidence 75%. An opinion, not a finding.

Criticalkmoviez.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.

Criticallogisticsasset.funscore 68· active website
TLD with a high abuse rate “fun”page impersonates a brand “FedEx”brand in page title, not in the name “fedex”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

See all 839 high and critical rows for 2026-09-09

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.