140,350 domains were born on Friday, September 25, 2026
On Friday, September 25, 2026 the census compared 1,063 zone files holding 77,224,748 domains against the day before. 140,350 names were new (0.182% of the universe), 232,396 were gone, net -92,046. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.
New domains per day
What was behind the new names
- Active website23,915 17.0%
- Parked or for sale2,894 2.1%
- Registered, no site yet23,114 16.5%
- Nothing there at all49,928 35.6%
- Couldn't tell40,499 28.9%
What the 23,915 live sites are about
Where the new names landed
| TLD | Born | Gone | Flagged /1k |
|---|---|---|---|
| .top | 13,932 | 18,354 | 4.0 |
| .shop | 13,048 | 12,390 | 1.7 |
| .online | 10,585 | 6,690 | 3.4 |
| .xyz | 10,366 | 125,932 | 7.3 |
| .org | 9,619 | 6,890 | 2.5 |
| .cyou | 7,257 | 961 | 0.6 |
| .site | 5,425 | 4,308 | 2.8 |
| .store | 5,278 | 4,698 | 4.4 |
| .info | 4,741 | 8,131 | 1.5 |
| .app | 4,426 | 1,095 | 1.8 |
| .vip | 3,821 | 2,744 | 0.8 |
| .asia | 3,331 | 882 | 0.6 |
| .biz | 2,783 | 717 | 1.1 |
| .click | 2,317 | 1,307 | 8.6 |
| .pro | 2,104 | 2,457 | 1.9 |
| .work | 1,873 | 3,277 | 1.1 |
| .world | 1,622 | 644 | 3.1 |
| .space | 1,580 | 824 | 2.5 |
| .live | 1,411 | 1,446 | 9.2 |
| .wiki | 1,385 | 137 | 5.1 |
| .tech | 1,361 | 570 | 2.9 |
| .cfd | 1,332 | 1,254 | 5.3 |
| .lol | 1,316 | 793 | 6.8 |
| .dev | 1,299 | 389 | 0.8 |
| .icu | 1,232 | 2,078 | 4.9 |
Top 25 of 532 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-09-25.
Who is parking them
What the live sites are built with
Writing system of the live sites
How old the departed names were
Risk signals
Every one of the 322,190 births was scored on its name, its nameservers and registrar, and the page it served. 11,411 scored at all; 42 critical, 827 high, 1,938 medium, 8,604 low. The top 300 were screenshotted and shown to a model, which called 131 of them phishing, scam or abuse and 145 benign.
TLDs with the most flagged births per 1,000
Signals that fired most
Brands most often echoed in new names
Registrars of flagged names
Nameserver providers of flagged names
Worth a second look
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
Model opinion: looks like phishing (target: PayPal), confidence 97%. An opinion, not a finding.
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
Model opinion: looks like abuse (target: Verizon), confidence 80%. An opinion, not a finding.
Model opinion: looks like abuse (target: OpenAI), confidence 58%. An opinion, not a finding.
Model opinion: looks like abuse (target: Shopee), confidence 60%. An opinion, not a finding.
Model opinion: looks like phishing (target: Telegram), confidence 86%. An opinion, not a finding.
Model opinion: looks like phishing (target: Telegram), confidence 95%. An opinion, not a finding.
Model opinion: looks like a scam (target: Warden Protocol), confidence 88%. An opinion, not a finding.
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
About this data
The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.
Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.