Daily zone census

192,638 domains were born on Wednesday, October 7, 2026

192,638
domains appeared
166,136
domains left the zone
12.2%
had a live website by day's end
446
flagged high or critical

On Wednesday, October 7, 2026 the census compared 1,062 zone files holding 77,532,863 domains against the day before. 192,638 names were new (0.248% of the universe), 166,136 were gone, net +26,502. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Sep 5Oct 19

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website23,432 12.2%
  • Parked or for sale1,862 1.0%
  • Registered, no site yet27,380 14.2%
  • Nothing there at all48,449 25.2%
  • Couldn't tell91,515 47.5%

What the 23,432 live sites are about

Unclassified8,102 · 34.6%
Hosting & domains2,131 · 9.1%
E-commerce & retail1,559 · 6.7%
Gambling & casino1,289 · 5.5%
SaaS & tech1,143 · 4.9%
AI software756 · 3.2%
Corporate services698 · 3.0%
Real estate668 · 2.9%
Blogs & personal657 · 2.8%
Streaming Piracy604 · 2.6%
Construction Trades552 · 2.4%
Crypto Web3549 · 2.3%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz60,18254,7900.6
.top20,39618,0931.9
.org10,7268,4460.8
.online10,7056,8312.1
.shop10,2549,6371.2
.info9,3815,6580.9
.site5,2653,5673.4
.app4,8851,6782.0
.store4,8765,0000.4
.vip4,0342,2360.2
.cyou3,7168444.8
.dev3,0637750.3
.pro2,3201,7340.9
.click1,9081,16813.1
.sbs1,8531,2494.3
.space1,6691,0220.0
.live1,6477562.4
.biz1,5935930.0
.cfd1,5775403.2
.world1,4894352.0
.fun1,37867410.2
.tech1,3625641.5
.lol1,3495,05514.1
.cloud1,2634920.0
.lat9366623.2

Top 25 of 530 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-10-07.

Who is parking them

Dan621
Sav153
Atom140
Afternic48
Domeneshop39
NameBright37
Sedo14

What the live sites are built with

Vercel2,387
WordPress2,074
Shopify248
Wix109
Next.js98
Squarespace72
GitHub Pages12
Drupal10
Linktree10
Webflow8

Writing system of the live sites

latin19,914
han1,326
cyrillic1,209
arabic293
hangul219
devanagari208
thai126
hiragana38

How old the departed names were

1–2 years660
2–5 years7
6–30 days4
1–3 months4
3–12 months73
0–5 days (add-grace return)4
~1 year (first renewal lapse)3

Risk signals

Every one of the 373,817 births was scored on its name, its nameservers and registrar, and the page it served. 9,487 scored at all; 25 critical, 421 high, 2,160 medium, 6,881 low. The top 300 were screenshotted and shown to a model, which called 120 of them phishing, scam or abuse and 144 benign.

TLDs with the most flagged births per 1,000

.bond36.5 · 13 of 356
.icu19.7 · 14 of 712
.mom18.9 · 4 of 212
.stream17.9 · 2 of 112
.lol14.1 · 20 of 1,349
.click13.1 · 25 of 1,908
.work11.5 · 4 of 348
.wiki11.1 · 6 of 451
.fun10.2 · 14 of 1,378
.quest9.7 · 2 of 207

Signals that fired most

brand in page title, not in the name1,126
TLD with a high abuse rate886
brand in the name688
form on a brand-styled page554
brand name behind Cloudflare326
nameserver domain born the same day289
punycode name241
one-letter brand typo176
identical page on many newborns152
lure words (login, verify, secure…)142
page impersonates a brand113
brand plus digits99

Brands most often echoed in new names

icloud72
fedex44
google39
whatsapp38
usaa37
binance32
tmobile32
amazon28
vanguard27
roblox26
gmail23
tiktok20

Registrars of flagged names

NameCheap, Inc.10
Spaceship, Inc.8
Cloudflare, Inc.6
NameSilo, LLC3
NicNames, Inc.3
HOSTINGER operations, UAB3
NICENIC INTERNATIONAL GROUP CO., LIMITED3
GoDaddy.com, LLC2
eNom, LLC1
Dynadot Inc1

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbybiteplatform.cfdscore 83echoes bybit· active website
brand in the name “bybit”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”page impersonates a brand “Binance”+1 more

Model opinion: looks like phishing (target: Bybit), confidence 90%. An opinion, not a finding.

Criticalgmailaccounts.orgscore 82echoes gmail· active website
brand in the name “gmail”lure words (login, verify, secure…) “account,accounts”brand in page title, not in the name “wordpress”

Model opinion: looks like abuse (target: Google (Gmail)), confidence 80%. An opinion, not a finding.

Criticaltrustwalletsinfo.comscore 82echoes trustwallet· active website
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “Gransy, s.r.o.”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Trust Wallet), confidence 93%. An opinion, not a finding.

Criticalcostcodle.lolscore 77echoes costco· active website
brand in the name “costco”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “costco”+1 more

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticalcoogle.xyzscore 74echoes google· active website
one-letter brand typo “coogle≈google”TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: Google), confidence 82%. An opinion, not a finding.

Criticaldigimagazine.orgscore 68· active website
page asks for credentials “Sign in to your account”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Criticalgigtrax.appscore 68· active website
page asks for credentials “Sign in to your account”brand in page title, not in the name “quickbooks”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticalsmspulse.onlinescore 68· active website
page asks for credentials “Sign In to Your Account”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticaltrackingmail.latscore 68echoes gmail· active website
brand in the name “gmail”lure words (login, verify, secure…) “track,tracking”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Criticalinvoicesky.appscore 66· active website
lure words (login, verify, secure…) “invoice”page impersonates a brand “PayPal”brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Criticalprehistoric-farm-roblox.wikiscore 65echoes roblox· active website
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticaltelegraem.topscore 64echoes telegram· active website
one-letter brand typo “telegraem≈telegram”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “facebook”

Model opinion: looks like abuse (target: Telegram), confidence 72%. An opinion, not a finding.

Criticalrobloxpad.appscore 63echoes roblox· active website
brand in the name “roblox”brand name and brand-styled page “roblox”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Criticalshopeearab.comscore 63echoes shopee· active website
brand in the name “shopee”brand name and brand-styled page “shopee”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Shopee), confidence 60%. An opinion, not a finding.

Criticaltiktokdownloader.blogscore 63echoes tiktok· active website
brand in the name “tiktok”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 54%. An opinion, not a finding.

See all 446 high and critical rows for 2026-10-07

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.