Daily zone census

138,191 domains were born on Monday, September 14, 2026

138,191
domains appeared
96,451
domains left the zone
10.6%
had a live website by day's end
555
flagged high or critical

On Monday, September 14, 2026 the census compared 1,060 zone files holding 76,699,193 domains against the day before. 138,191 names were new (0.180% of the universe), 96,451 were gone, net +41,740. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Aug 20Sep 30

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website14,644 10.6%
  • Parked or for sale1,555 1.1%
  • Registered, no site yet15,480 11.2%
  • Nothing there at all29,048 21.0%
  • Couldn't tell77,464 56.1%

What the 14,644 live sites are about

Unclassified4,912 · 33.5%
E-commerce & retail1,765 · 12.1%
Hosting & domains1,453 · 9.9%
Gambling & casino939 · 6.4%
SaaS & tech546 · 3.7%
Blogs & personal444 · 3.0%
Gaming382 · 2.6%
Construction Trades381 · 2.6%
Crypto Web3330 · 2.3%
AI software328 · 2.2%
Corporate services310 · 2.1%
Real estate304 · 2.1%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz55,42913,0731.1
.top10,67813,2184.1
.online6,8975,6655.1
.org6,2356,8452.1
.shop6,1208,7531.6
.info4,8175,8402.1
.store4,0954,3052.2
.site3,9493,3033.3
.vip3,0651,9250.0
.lol2,0257253.5
.cyou1,6098883.1
.pro1,4171,6602.1
.space1,3776995.1
.click1,3243,19013.6
.cloud1,1784970.0
.live1,1601,2725.2
.dev1,1534660.9
.cfd1,1441,2626.1
.icu1,0759478.4
.sbs1,0591,5515.7
.tech1,0374651.0
.fun1,02372511.7
.biz6455964.7
.world6287001.6
.club5994920.0

Top 25 of 491 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-09-14.

Who is parking them

Dan732
Atom79
NameBright62
Sav53
Afternic51
Sedo41
Domeneshop11
Epik4
Efty1
Fabulous1

What the live sites are built with

Vercel1,557
WordPress1,539
Shopify192
Wix65
Next.js50
Squarespace37
Webflow8
GitHub Pages8
Joomla6
Drupal3

Writing system of the live sites

latin12,553
han790
cyrillic662
arabic288
thai131
hangul106
hiragana34
bengali29

How old the departed names were

1–2 years403
2–5 years21
6–30 days3
1–3 months2
over 5 years13
3–12 months16
0–5 days (add-grace return)13
~1 year (first renewal lapse)74

Risk signals

Every one of the 263,913 births was scored on its name, its nameservers and registrar, and the page it served. 7,249 scored at all; 24 critical, 531 high, 1,173 medium, 5,521 low. The top 300 were screenshotted and shown to a model, which called 117 of them phishing, scam or abuse and 125 benign.

TLDs with the most flagged births per 1,000

.today26.5 · 3 of 113
.wiki16.4 · 6 of 305
.click13.6 · 18 of 1,324
.link13.4 · 3 of 224
.win13.2 · 5 of 304
.fyi12.3 · 3 of 243
.fun11.7 · 13 of 1,023
.app11.1 · 4 of 361
.ltd9.2 · 1 of 109
.company9 · 1 of 111

Signals that fired most

brand in page title, not in the name906
TLD with a high abuse rate871
brand in the name457
brand name at a retail registrar454
form on a brand-styled page320
punycode name178
brand name behind Cloudflare166
brand name at a watch-list registrar157
one-letter brand typo117
lure words (login, verify, secure…)111
brand plus digits90
identical page on many newborns77

Brands most often echoed in new names

icloud41
binance30
tmobile27
gmail25
apple23
google21
roblox20
tiktok19
whatsapp19
vanguard18
amazon16
telegram16

Registrars of flagged names

NameCheap, Inc.190
Spaceship, Inc.114
HOSTINGER operations, UAB108
Name.com, Inc.96
GoDaddy.com, LLC90
NameSilo, LLC73
Cloudflare, Inc.64
Dynadot Inc60
Porkbun LLC55
GMO Internet Group, Inc. d/b/a Onamae.com29

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalrobinhoodrumble.funscore 85echoes robinhood· active website
brand in the name “robinhood”TLD with a high abuse rate “fun”page pushes urgent payment “claim your reward”brand name and brand-styled page “robinhood”+1 more

Model opinion: looks like a scam (target: Robinhood), confidence 68%. An opinion, not a finding.

Criticalreroblox.comscore 83echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+2 more

Model opinion: looks benign, confidence 89%. An opinion, not a finding.

Criticalios27-lcloud.comscore 82echoes icloud· active website
one-letter brand typo “lcloud≈icloud”brand plus digits “ios27-lcloud”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “PayPal”+1 more

Model opinion: looks like abuse (target: Apple iCloud), confidence 68%. An opinion, not a finding.

Criticalbolivia-1-tikktok.sbsscore 78echoes tiktok· active website
one-letter brand typo “tikktok≈tiktok”brand plus digits “bolivia-1-tikktok”TLD with a high abuse rate “sbs”brand name at a retail registrar “NameCheap, Inc.”+2 more

Model opinion: looks like abuse (target: TikTok), confidence 92%. An opinion, not a finding.

Criticalrobloxinnovationawards2026.onlinescore 73echoes roblox· active website
brand in the name “roblox”brand plus digits “robloxinnovationawards2026”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticalinstagramlogin.onlinescore 71echoes instagram· active website
brand in the name “instagram”lure words (login, verify, secure…) “login”brand name and brand-styled page “instagram”

Model opinion: looks like abuse (target: Instagram), confidence 70%. An opinion, not a finding.

Criticalwhatsappai-demo11.winscore 70echoes whatsapp· active website
brand in the name “whatsapp”brand plus digits “whatsappai-demo11”TLD with a high abuse rate “win”brand name behind Cloudflare “cloudflare.com”+1 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalmonochromeroblox.wikiscore 69echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Criticalrobloxer-best.onlinescore 69echoes roblox· active website
brand in the name “roblox”brand name on a rarely-seen nameserver “regexdomain.com”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticalverizonoutage.orgscore 69echoes verizon· active website
brand in the name “verizon”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “verizon”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Verizon), confidence 60%. An opinion, not a finding.

Criticalaramoviez.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.

Criticalbuggie.sitescore 68· active website
page asks for credentials “Verify your identity”brand in page title, not in the name “kraken”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Kraken), confidence 97%. An opinion, not a finding.

Criticalfreisdstore.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

Criticalhamusmmpanel.onlinescore 68· active website
page asks for credentials “log in to your account”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Criticallauraboost.onlinescore 68· active website
page asks for credentials “log in to your account”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

See all 555 high and critical rows for 2026-09-14

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.