Daily zone census

136,413 domains were born on Monday, October 5, 2026

136,413
domains appeared
107,196
domains left the zone
9.6%
had a live website by day's end
568
flagged high or critical

On Monday, October 5, 2026 the census compared 1,062 zone files holding 77,407,934 domains against the day before. 136,413 names were new (0.176% of the universe), 107,196 were gone, net +29,217. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Sep 3Oct 19

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website13,031 9.6%
  • Parked or for sale1,459 1.1%
  • Registered, no site yet17,165 12.6%
  • Nothing there at all30,037 22.0%
  • Couldn't tell74,721 54.8%

What the 13,031 live sites are about

Unclassified4,590 · 35.2%
Hosting & domains1,316 · 10.1%
E-commerce & retail922 · 7.1%
Gambling & casino767 · 5.9%
SaaS & tech486 · 3.7%
AI software446 · 3.4%
Blogs & personal375 · 2.9%
Crypto Web3332 · 2.5%
Corporate services321 · 2.5%
Adult292 · 2.2%
Gaming263 · 2.0%
Education258 · 2.0%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz55,9338,2540.6
.top13,22413,6844.2
.online7,0335,9562.7
.org7,0146,7341.3
.shop6,07710,6252.8
.site3,89511,0113.6
.store3,6834,1834.6
.vip3,2952,2000.3
.info3,0015,9113.0
.cfd1,7289429.3
.cyou1,4821,3170.7
.pro1,4471,3611.4
.click1,2672,05311.8
.lol1,1766407.7
.sbs1,1611,42517.2
.fun1,16177110.3
.live1,0488555.7
.tech1,0174863.9
.space9907881.0
.asia9133,7464.4
.cloud7235614.1
.homes636836.3
.club5725871.7
.website5625541.8
.baby542521.8

Top 25 of 495 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-10-05.

Who is parking them

Dan448
Atom109
Sav79
NameBright48
Sedo40
Afternic22
Domeneshop22
Epik6
Fabulous2
HugeDomains1

What the live sites are built with

Vercel1,406
WordPress1,229
Shopify60
Squarespace47
Wix45
Next.js30
GitHub Pages12
Drupal5
Joomla3
Webflow2

Writing system of the live sites

latin11,063
cyrillic711
han637
arabic247
hangul149
thai79
bengali48
hiragana35

How old the departed names were

1–2 years828
2–5 years38
6–30 days11
1–3 months16
over 5 years15
3–12 months5
0–5 days (add-grace return)10
~1 year (first renewal lapse)122

Risk signals

Every one of the 269,245 births was scored on its name, its nameservers and registrar, and the page it served. 6,686 scored at all; 28 critical, 540 high, 1,233 medium, 4,885 low. The top 300 were screenshotted and shown to a model, which called 117 of them phishing, scam or abuse and 157 benign.

TLDs with the most flagged births per 1,000

.cam25.8 · 5 of 194
.yachts25.2 · 3 of 119
.icu23.9 · 11 of 461
.sbs17.2 · 24 of 1,161
.quest12.6 · 3 of 238
.click11.8 · 16 of 1,267
.wiki11.6 · 7 of 346
.beauty10.8 · 4 of 371
.fun10.3 · 12 of 1,161
.mom10 · 2 of 201

Signals that fired most

TLD with a high abuse rate884
brand in page title, not in the name857
brand name at a retail registrar592
brand in the name468
form on a brand-styled page397
punycode name266
brand name at a watch-list registrar224
brand name behind Cloudflare212
one-letter brand typo134
lure words (login, verify, secure…)133
brand plus digits110
identical page on many newborns100

Brands most often echoed in new names

icloud49
whatsapp46
tmobile37
apple27
binance22
uniswap22
amazon20
google18
tiktok18
fedex17
vanguard15
telegram13

Registrars of flagged names

NameCheap, Inc.194
Dynadot Inc141
HOSTINGER operations, UAB122
Spaceship, Inc.116
GoDaddy.com, LLC99
Cloudflare, Inc.78
Porkbun LLC76
NameSilo, LLC74
NameSilo,LLC49
Name.com, Inc.46

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalgmailios.topscore 93echoes gmail· active website
brand in the name “gmail”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo,LLC”+3 more

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Criticalvanguardaiinfo.clickscore 91echoes vanguard· active website
brand in the name “vanguard”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+3 more

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalvanguardbizsolutions.sbsscore 91echoes vanguard· active website
brand in the name “vanguard”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+3 more

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticalamazon789.winscore 78echoes amazon· active website
brand in the name “amazon”brand plus digits “amazon789”TLD with a high abuse rate “win”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.

Criticalstarlinkuganda.orgscore 77echoes starlink· active website
brand in the name “starlink”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “starlink”+1 more

Model opinion: looks like phishing (target: Starlink), confidence 85%. An opinion, not a finding.

Criticalem-telegram.sbsscore 73echoes telegram· active website
brand in the name “telegram”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+2 more

Model opinion: looks like abuse (target: Telegram), confidence 86%. An opinion, not a finding.

Criticales-telegram.sbsscore 73echoes telegram· active website
brand in the name “telegram”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+2 more

Model opinion: looks like abuse (target: Telegram), confidence 86%. An opinion, not a finding.

Criticalclinicadentalsantander.comscore 71echoes santander· active website
brand in the name “santander”brand name at a retail registrar “10dencehispahard SLU”brand name and brand-styled page “santander”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Criticaldrill-for-eggs-roblox.wikiscore 71echoes roblox· active website
brand in the name “roblox”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticallearnsalesforce.sitescore 71echoes salesforce· active website
brand in the name “salesforce”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “salesforce”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Criticale-inviteonline.sbsscore 68· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Office365”brand in page title, not in the name “adobe”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Adobe), confidence 97%. An opinion, not a finding.

Criticalmp4bua.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 93%. An opinion, not a finding.

Criticalsocial-trendo.storescore 68· active website
page asks for credentials “SIGN IN TO YOUR ACCOUNT”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Criticalcanaux-telegram-sexe.streamscore 67echoes telegram· active website
brand in the name “telegram”TLD with a high abuse rate “stream”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”+1 more

Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.

Criticalrobloxmym.xyzscore 67echoes roblox· active website
brand in the name “roblox”TLD with a high abuse rate “xyz”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+1 more

Model opinion: looks like a scam (target: Roblox), confidence 80%. An opinion, not a finding.

See all 568 high and critical rows for 2026-10-05

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.