Daily zone census

199,579 domains were born on Saturday, October 10, 2026

199,579
domains appeared
119,816
domains left the zone
9.4%
had a live website by day's end
933
flagged high or critical

On Saturday, October 10, 2026 the census compared 1,062 zone files holding 77,778,197 domains against the day before. 199,579 names were new (0.257% of the universe), 119,816 were gone, net +79,763. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Sep 8Oct 19

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website18,681 9.4%
  • Parked or for sale2,722 1.4%
  • Registered, no site yet19,989 10.0%
  • Nothing there at all43,450 21.8%
  • Couldn't tell114,737 57.5%

What the 18,681 live sites are about

Unclassified6,166 · 33.0%
E-commerce & retail1,322 · 7.1%
Crypto Web31,209 · 6.5%
Adult1,116 · 6.0%
Gambling & casino1,020 · 5.5%
Hosting & domains782 · 4.2%
AI software627 · 3.4%
SaaS & tech616 · 3.3%
Corporate services616 · 3.3%
Streaming Piracy535 · 2.9%
Blogs & personal503 · 2.7%
Construction Trades391 · 2.1%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz76,2225,7171.6
.top14,03822,1833.3
.shop12,34712,6060.9
.online9,8028,0222.9
.org9,0757,7631.7
.lat5,2643520.9
.site5,0404,3653.0
.cfd4,5571,3813.7
.info4,4477,5693.1
.store4,4454,6452.5
.vip3,2629,2480.0
.asia3,2625030.6
.click2,9631,5716.7
.wiki2,3621281.7
.pro2,3021,8230.9
.baby2,129641.4
.live1,6458615.5
.space1,6121,0200.6
.sbs1,5952,1908.2
.tech1,4785604.7
.icu1,4371,3852.1
.fun1,4118919.2
.biz1,3941,3370.0
.lol1,3543858.1
.digital1,2478362.4

Top 25 of 510 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-10-10.

Who is parking them

Dan437
Atom342
Sav255
NameBright41
Domeneshop35
Sedo26
Afternic5
Voodoo1
Fabulous1

What the live sites are built with

WordPress1,709
Vercel1,598
Wix93
Squarespace78
Next.js47
Shopify37
GitHub Pages9
Webflow6
Drupal5
Joomla5

Writing system of the live sites

latin14,039
han2,907
cyrillic1,010
arabic281
hangul215
thai122
bengali33
hiragana19

How old the departed names were

1–2 years176
2–5 years2
6–30 days10
1–3 months2
over 5 years2
3–12 months3
0–5 days (add-grace return)2
~1 year (first renewal lapse)39

Risk signals

Every one of the 380,728 births was scored on its name, its nameservers and registrar, and the page it served. 9,104 scored at all; 27 critical, 906 high, 1,402 medium, 6,769 low. The top 300 were screenshotted and shown to a model, which called 166 of them phishing, scam or abuse and 95 benign.

TLDs with the most flagged births per 1,000

.ink245.9 · 90 of 366
.rest19 · 3 of 158
.mom14.4 · 4 of 278
.ltd13.3 · 3 of 150
.win12.2 · 7 of 575
.help10.2 · 4 of 394
.fun9.2 · 15 of 1,411
.bid8.3 · 1 of 120
.sbs8.2 · 15 of 1,595
.lol8.1 · 11 of 1,354

Signals that fired most

brand in page title, not in the name939
brand name at a retail registrar901
brand in the name863
TLD with a high abuse rate828
form on a brand-styled page496
brand name behind Cloudflare329
punycode name254
brand name at a watch-list registrar247
brand plus digits192
one-letter brand typo191
identical page on many newborns165
very long name149

Brands most often echoed in new names

whatsapp103
google72
icloud69
americanexpress60
amazon55
binance41
fedex37
tmobile37
gmail27
starlink24
xbox23
vanguard22

Registrars of flagged names

NameCheap, Inc.187
HOSTINGER operations, UAB155
GMO Internet Group, Inc. d/b/a Onamae.com134
Spaceship, Inc.132
Dominet (HK) Limited108
Dynadot Inc89
GoDaddy.com, LLC89
GKG.Net, Inc.64
NameSilo, LLC64
Cloudflare, Inc.64

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalbvva-mobile.sbsscore 80echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “bbva”+1 more

Model opinion: looks like phishing (target: Garanti BBVA), confidence 88%. An opinion, not a finding.

Criticalnintendo-short.sitescore 76echoes nintendo· active website
brand in the name “nintendo”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “PayPal”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Nintendo), confidence 70%. An opinion, not a finding.

Criticalqvidia.funscore 74echoes nvidia· active website
one-letter brand typo “qvidia≈nvidia”TLD with a high abuse rate “fun”brand in page title, not in the name “nvidia”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: NVIDIA), confidence 60%. An opinion, not a finding.

Criticalshopifyhub.workscore 71echoes shopify· active website
brand in the name “shopify”TLD with a high abuse rate “work”brand name and brand-styled page “shopify”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Shopify), confidence 60%. An opinion, not a finding.

Criticalrevoluta-ai-dvisor.digitalscore 69echoes revolut· active website
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “revolut”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Revolut), confidence 85%. An opinion, not a finding.

Criticalmasarevo.onescore 68· active website
free DNS provider “dnsowl.com”page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Microsoft), confidence 97%. An opinion, not a finding.

Criticalndabsunm.onescore 68· active website
free DNS provider “dnsowl.com”page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Microsoft), confidence 97%. An opinion, not a finding.

Criticalsatoshishield.funscore 68· active website
TLD with a high abuse rate “fun”page impersonates a brand “coinbase”brand in page title, not in the name “coinbase”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticaltranom.comscore 68· active website
page asks for credentials “sign in to your account”brand in page title, not in the name “roblox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Criticalbooking-807364.clickscore 66echoes booking· active website
brand in the name “booking”brand plus digits “booking-807364”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like phishing (target: Yandex (Yandex Realty / Яндекс Аренда)), confidence 93%. An opinion, not a finding.

Criticalthepets-amazon.shopscore 63echoes amazon· active website
brand in the name “amazon”brand name and brand-styled page “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticaldirotaobao.topscore 62echoes taobao· active website
brand in the name “taobao”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Criticalfedexswiss.onlinescore 62echoes fedex· active website
brand in the name “fedex”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: FedEx), confidence 86%. An opinion, not a finding.

Criticalzenotaobao.topscore 62echoes taobao· active website
brand in the name “taobao”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Criticalsurvive-a-million-monkeys-roblox.wikiscore 61echoes roblox· active website
brand in the name “roblox”many hyphens “4”very long name “32”brand name behind Cloudflare “cloudflare.com”+1 more

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

See all 933 high and critical rows for 2026-10-10

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.