Daily zone census

147,757 domains were born on Sunday, October 4, 2026

147,757
domains appeared
98,899
domains left the zone
9.6%
had a live website by day's end
659
flagged high or critical

On Sunday, October 4, 2026 the census compared 1,062 zone files holding 77,378,717 domains against the day before. 147,757 names were new (0.191% of the universe), 98,899 were gone, net +48,858. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Sep 2Oct 19

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website14,150 9.6%
  • Parked or for sale2,220 1.5%
  • Registered, no site yet18,059 12.2%
  • Nothing there at all28,547 19.3%
  • Couldn't tell84,781 57.4%

What the 14,150 live sites are about

Unclassified4,834 · 34.2%
Hosting & domains1,961 · 13.9%
E-commerce & retail1,072 · 7.6%
Gambling & casino737 · 5.2%
SaaS & tech449 · 3.2%
Adult422 · 3.0%
Blogs & personal398 · 2.8%
Crypto Web3350 · 2.5%
AI software323 · 2.3%
Gaming313 · 2.2%
Real estate307 · 2.2%
Education297 · 2.1%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz55,5485,3402.4
.top23,24415,5552.2
.org7,1956,8071.4
.online6,5887,3245.0
.shop6,37310,5182.5
.store3,8584,6833.1
.site3,7904,3914.5
.info3,1976,0973.4
.baby3,1611550.9
.vip2,9832,2101.3
.cfd1,5229459.9
.click1,3401,2836.7
.pro1,3392,1273.7
.cyou1,2307724.1
.lol1,1947385.0
.sbs1,1871,50016.0
.space1,1151,0440.0
.tech1,0948658.2
.live1,0379187.7
.fun99975413.0
.cloud9426113.2
.icu8081,2915.0
.asia7087971.4
.world6033955.0
.club5815161.7

Top 25 of 502 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-10-04.

Who is parking them

Dan620
Atom91
Sav66
NameBright44
Sedo39
Domeneshop36
Afternic32
Epik1
Voodoo1

What the live sites are built with

Vercel1,323
WordPress1,291
Shopify113
Wix57
Squarespace41
Next.js38
Joomla24
Webflow5
Drupal3
GitHub Pages3

Writing system of the live sites

latin11,879
cyrillic876
han717
arabic262
hangul178
thai82
bengali65
hiragana37

How old the departed names were

1–2 years676
2–5 years40
6–30 days6
1–3 months1
over 5 years28
3–12 months11
0–5 days (add-grace return)12
~1 year (first renewal lapse)62

Risk signals

Every one of the 281,639 births was scored on its name, its nameservers and registrar, and the page it served. 7,243 scored at all; 38 critical, 621 high, 1,167 medium, 5,417 low. The top 300 were screenshotted and shown to a model, which called 115 of them phishing, scam or abuse and 140 benign.

TLDs with the most flagged births per 1,000

.cam24.6 · 3 of 122
.help22.5 · 5 of 222
.win17.5 · 5 of 285
.sbs16 · 20 of 1,187
.work15 · 3 of 200
.fun13 · 14 of 999
.quest12.6 · 3 of 238
.bond11.2 · 7 of 446
.cfd9.9 · 18 of 1,522
.skin9.1 · 2 of 219

Signals that fired most

TLD with a high abuse rate841
brand in page title, not in the name781
brand name at a retail registrar686
brand in the name491
form on a brand-styled page408
punycode name260
brand name at a watch-list registrar232
brand name behind Cloudflare196
one-letter brand typo169
lure words (login, verify, secure…)118
identical page on many newborns108
brand plus digits98

Brands most often echoed in new names

icloud70
binance44
stripe41
tmobile31
amazon28
gmail27
google23
fedex22
telegram20
ebay19
tiktok19
vanguard18

Registrars of flagged names

HOSTINGER operations, UAB176
NameCheap, Inc.162
Spaceship, Inc.139
GMO Internet Group, Inc. d/b/a Onamae.com131
GoDaddy.com, LLC114
Dynadot Inc94
Cloudflare, Inc.88
Name.com, Inc.58
NICENIC INTERNATIONAL GROUP CO., LIMITED46
NameSilo, LLC42

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalroblox-reward-robux.cfdscore 93echoes roblox· active website
brand in the name “roblox”lure words (login, verify, secure…) “reward”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like phishing (target: Roblox), confidence 86%. An opinion, not a finding.

Criticaloffz.sitescore 90· active website
page asks for credentials “Login to your account”page impersonates a brand “Binance”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Criticalbuy-tiktok-ads-accounts.orgscore 82echoes tiktok· active website
brand in the name “tiktok”lure words (login, verify, secure…) “account,accounts”many hyphens “3”brand name at a retail registrar “Dynadot Inc”+1 more

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticalqi-ncloud.cfdscore 78echoes icloud· active website
one-letter brand typo “ncloud≈icloud”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Criticalbannertiktok.onlinescore 77echoes tiktok· active website
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “tiktok”+1 more

Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.

Criticalrevolutregister.infoscore 77echoes revolut· active website
brand in the name “revolut”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “revolut”+1 more

Model opinion: looks like a scam (target: Revolut), confidence 82%. An opinion, not a finding.

Criticalrobinhoodconsultoria.tradescore 77echoes robinhood· active website
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”brand name and brand-styled page “robinhood”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticaltiktokyou.onlinescore 77echoes tiktok· active website
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “tiktok”+1 more

Model opinion: looks like abuse (target: TikTok), confidence 77%. An opinion, not a finding.

Criticalasiansexbox.clickscore 76echoes xbox· active website
brand in the name “xbox”TLD with a high abuse rate “click”brand name on a rarely-seen nameserver “xxxspot.click”brand name at a retail registrar “NameSilo, LLC”+2 more

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalstarlinkcloudone.sbsscore 73echoes starlink· active website
brand in the name “starlink”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more

Model opinion: looks like abuse (target: Starlink (SpaceX)), confidence 65%. An opinion, not a finding.

Criticaltelegramifsamerkezi.lolscore 73echoes telegram· active website
brand in the name “telegram”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+2 more

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticalrhea-finance.cyouscore 72echoes binance· active website
one-letter brand typo “finance≈binance”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”+1 more

Model opinion: looks like abuse (target: Rhea Finance), confidence 62%. An opinion, not a finding.

Criticalebaytrustzone.sitescore 71echoes ebay· active website
brand in the name “ebay”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “ebay”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: eBay), confidence 60%. An opinion, not a finding.

Criticalmimiroblox.storescore 71echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “iNET SOFTWARE COMPANY LIMITED”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Roblox), confidence 60%. An opinion, not a finding.

Criticalnohu90gmail.infoscore 70echoes gmail· active website
brand in the name “gmail”brand plus digits “nohu90gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”+1 more

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

See all 659 high and critical rows for 2026-10-04

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.