dns.pizza
Daily zone census

195,511 domains were born on Wednesday, September 30, 2026

195,511
domains appeared
113,748
domains left the zone
12.3%
had a live website by day's end
849
flagged high or critical

On Wednesday, September 30, 2026 the census compared 1,063 zone files holding 77,273,795 domains against the day before. 195,511 names were new (0.253% of the universe), 113,748 were gone, net +81,763. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Aug 29Oct 16

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website24,105 12.3%
  • Parked or for sale1,900 1.0%
  • Registered, no site yet21,043 10.8%
  • Nothing there at all40,204 20.6%
  • Couldn't tell108,259 55.4%

What the 24,105 live sites are about

Unclassified7,038 · 29.2%
Gambling & casino4,384 · 18.2%
Hosting & domains2,185 · 9.1%
E-commerce & retail1,437 · 6.0%
SaaS & tech924 · 3.8%
Blogs & personal673 · 2.8%
Construction Trades602 · 2.5%
Crypto Web3579 · 2.4%
AI software538 · 2.2%
Adult523 · 2.2%
Corporate services435 · 1.8%
Gaming417 · 1.7%

Where the new names landed

TLDBornGoneFlagged /1k
.top38,94515,5781.4
.xyz33,1515,5451.8
.vip13,1402,4130.8
.online10,8477,8384.1
.shop10,21512,1041.4
.org10,1298,0901.7
.info7,1876,2333.5
.cam5,8121620.5
.site5,0593,8443.8
.store4,7704,8964.0
.app4,6341,1972.6
.work3,3983080.3
.pro2,4602,5401.6
.sbs2,3292,3453.9
.click2,1021,5835.7
.space1,7879871.1
.cfd1,7711,6583.4
.dev1,6324612.5
.asia1,4941,0500.0
.fun1,4248537.7
.tech1,3815485.8
.cyou1,3641,0473.7
.lol1,3263,0378.3
.live1,3131,4115.3
.cloud1,0056195.0

Top 25 of 522 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-09-30.

Who is parking them

Dan575
Atom253
Sav114
NameBright59
Sedo43
Domeneshop37
Afternic30
Epik1
Fabulous1
DomainMarket1

What the live sites are built with

Vercel2,337
WordPress1,897
Wix99
Squarespace73
Next.js68
Shopify36
GitHub Pages14
Webflow13
Joomla7
Linktree5

Writing system of the live sites

latin20,517
han1,437
cyrillic1,208
arabic322
thai188
hangul187
bengali67
greek63

How old the departed names were

1–2 years617
2–5 years18
6–30 days44
1–3 months4
over 5 years10
3–12 months252
0–5 days (add-grace return)2
~1 year (first renewal lapse)55

Risk signals

Every one of the 390,927 births was scored on its name, its nameservers and registrar, and the page it served. 10,683 scored at all; 29 critical, 820 high, 1,911 medium, 7,923 low. The top 300 were screenshotted and shown to a model, which called 128 of them phishing, scam or abuse and 128 benign.

TLDs with the most flagged births per 1,000

.icu18.5 · 17 of 919
.homes15.2 · 4 of 264
.baby14.1 · 4 of 283
.global11.7 · 2 of 171
.help11.1 · 6 of 541
.run10.7 · 2 of 187
.mom10.2 · 2 of 197
.fyi9.8 · 2 of 204
.beauty9.4 · 2 of 213
.stream9 · 1 of 111

Signals that fired most

brand in page title, not in the name1,573
TLD with a high abuse rate1,272
brand name at a retail registrar839
brand in the name668
form on a brand-styled page582
brand name at a watch-list registrar389
brand name behind Cloudflare276
punycode name205
one-letter brand typo183
lure words (login, verify, secure…)166
identical page on many newborns133
page impersonates a brand103

Brands most often echoed in new names

icloud78
gmail32
tmobile32
vanguard32
google30
binance29
amazon25
tiktok25
whatsapp25
ebay24
chatgpt22
openai21

Registrars of flagged names

Spaceship, Inc.537
NameCheap, Inc.250
HOSTINGER operations, UAB186
GoDaddy.com, LLC167
Dynadot Inc134
NameSilo, LLC113
Cloudflare, Inc.93
Porkbun LLC83
Name.com, Inc.79
Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)68

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbestbuy4u-2025-free-download.xyzscore 100echoes bestbuy· active website
brand in the name “bestbuy”many hyphens “3”very long name “28”brand plus digits “bestbuy4u-2025-free-download”+4 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalrefundspotifyrewards.onlinescore 93echoes spotify· active website
brand in the name “spotify”lure words (login, verify, secure…) “refund,refunds,reward,rewards”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “spotify”+1 more

Model opinion: looks like phishing (target: Spotify), confidence 90%. An opinion, not a finding.

Criticalmine-antarctica-roblox.wikiscore 83echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+2 more

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticalfxroblox.storescore 77echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”brand name and brand-styled page “roblox”+1 more

Model opinion: looks like abuse (target: Roblox), confidence 60%. An opinion, not a finding.

Critical24moneybd.workscore 68· active website
TLD with a high abuse rate “work”page impersonates a brand “Binance”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Criticalamazonhandmade.orgscore 68echoes amazon· active website
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”+1 more

Model opinion: looks like a scam (target: Amazon), confidence 72%. An opinion, not a finding.

Criticalclipstock.funscore 68· active website
TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”brand in page title, not in the name “uniswap”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.

Criticalgemgrade.funscore 68· active website
TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”brand in page title, not in the name “uniswap”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Criticalintesatradeai-it.onlinescore 68echoes intesa· active website
brand in the name “intesa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+1 more

Model opinion: looks like a scam (target: Intesa Sanpaolo), confidence 90%. An opinion, not a finding.

Criticalintesatradeai.onlinescore 68echoes intesa· active website
brand in the name “intesa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+1 more

Model opinion: looks like a scam, confidence 90%. An opinion, not a finding.

Criticalsaydetbechwet.orgscore 68· active website
page asks for credentials “Sign in to your account”brand in page title, not in the name “ledger”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Criticalslipbook.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “MetaMask”brand in page title, not in the name “uniswap”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticaltophdmovie.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Criticalzulqarnainbots.techscore 68· active website
page asks for credentials “Sign in to your account”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Criticalphantom-blade-0.wikiscore 67echoes phantom· active website
brand in the name “phantom”brand plus digits “phantom-blade-0”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.

See all 849 high and critical rows for 2026-09-30

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.