Daily zone census

205,500 domains were born on Tuesday, October 13, 2026

205,500
domains appeared
137,444
domains left the zone
12.0%
had a live website by day's end
838
flagged high or critical

On Tuesday, October 13, 2026 the census compared 1,062 zone files holding 77,963,495 domains against the day before. 205,500 names were new (0.264% of the universe), 137,444 were gone, net +68,056. Every new name was probed once over HTTP, honouring robots.txt, to see what was behind it. See the newest day.

New domains per day

Sep 9Oct 19

Each bar is a day; click one to open it. The census covers the gTLD zones ICANN's zone-data service publishes plus a sample of .com and .net.

What was behind the new names

  • Active website24,641 12.0%
  • Parked or for sale2,119 1.0%
  • Registered, no site yet26,656 13.0%
  • Nothing there at all52,162 25.4%
  • Couldn't tell99,922 48.6%

What the 24,641 live sites are about

Unclassified7,561 · 30.7%
Hosting & domains4,642 · 18.8%
E-commerce & retail1,357 · 5.5%
Gambling & casino1,244 · 5.0%
SaaS & tech973 · 3.9%
Adult734 · 3.0%
AI software668 · 2.7%
Blogs & personal595 · 2.4%
Crypto Web3579 · 2.3%
Gaming568 · 2.3%
Streaming Piracy537 · 2.2%
Construction Trades523 · 2.1%

Where the new names landed

TLDBornGoneFlagged /1k
.xyz63,15643,4631.5
.top24,20920,3191.3
.org10,7786,2752.0
.online9,9755,6532.4
.shop8,2559,8081.5
.app6,8631,1601.7
.site6,2572,6653.8
.cam5,814720.7
.info5,6835,4862.8
.store5,2004,9304.2
.vip2,9973,8241.3
.onl2,833980.4
.pro2,4781,1932.8
.click2,2749007.5
.baby2,269382.2
.sbs1,9551,5445.6
.cfd1,9381,3234.1
.live1,8086229.4
.cyou1,7971,6571.1
.lol1,7886,5015.6
.dev1,7115082.3
.club1,6564071.8
.space1,5618175.1
.wiki1,4658315.7
.tech1,4344364.2

Top 25 of 525 TLDs with a birth or death that day. Full table: /api/zone/census/tlds?day=2026-10-13.

Who is parking them

Dan768
Sav159
Atom117
NameBright55
Domeneshop43
Sedo16
Fabulous4
Afternic2
Epik1

What the live sites are built with

Vercel2,189
WordPress1,903
Next.js90
Wix79
Squarespace76
Shopify43
Drupal13
Webflow12
Joomla11
GitHub Pages11

Writing system of the live sites

latin20,956
han1,718
cyrillic1,096
arabic321
hangul178
thai166
bengali61
hebrew35

How old the departed names were

1–2 years770
2–5 years7
6–30 days1
1–3 months3
over 5 years6
0–5 days (add-grace return)7
~1 year (first renewal lapse)109

Risk signals

Every one of the 390,323 births was scored on its name, its nameservers and registrar, and the page it served. 10,605 scored at all; 37 critical, 801 high, 1,628 medium, 8,139 low. The top 300 were screenshotted and shown to a model, which called 123 of them phishing, scam or abuse and 141 benign.

TLDs with the most flagged births per 1,000

.ink88.5 · 30 of 339
.homes43 · 13 of 302
.wiki15.7 · 24 of 1,465
.win14.9 · 5 of 336
.mobi14.4 · 3 of 139
.live9.4 · 18 of 1,808
.life9.3 · 5 of 539
.bid8.9 · 1 of 112
.click7.5 · 18 of 2,274
.design7.5 · 1 of 134

Signals that fired most

brand in page title, not in the name1,208
TLD with a high abuse rate945
brand name at a retail registrar748
brand in the name743
form on a brand-styled page568
brand name behind Cloudflare311
brand name at a watch-list registrar257
punycode name245
brand plus digits164
one-letter brand typo161
lure words (login, verify, secure…)159
identical page on many newborns120

Brands most often echoed in new names

amazon66
whatsapp64
icloud57
tmobile42
binance40
americanexpress31
roblox27
google25
ebay24
gmail23
tiktok22
vanguard21

Registrars of flagged names

NameCheap, Inc.195
Spaceship, Inc.172
HOSTINGER operations, UAB157
GoDaddy.com, LLC127
Dynadot Inc117
Cloudflare, Inc.81
NameSilo, LLC78
GMO Internet Group, Inc. d/b/a Onamae.com78
Name.com, Inc.74
Porkbun LLC53

Worth a second look

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalwalmartaccess.sitescore 100echoes walmart· active website
brand in the name “walmart”lure words (login, verify, secure…) “access”page impersonates a brand “PayPal”brand name and brand-styled page “walmart”+1 more

Model opinion: looks like phishing (target: Walmart), confidence 95%. An opinion, not a finding.

Criticalbuyoutlookaccounts.comscore 85echoes outlook· active website
brand in the name “outlook”lure words (login, verify, secure…) “account,accounts”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “outlook”+1 more

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Criticalfidelitywallet.appscore 77echoes fidelity· active website
brand in the name “fidelity”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “fidelity”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticalgecetsy.comscore 77echoes etsy· active website
brand in the name “etsy”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “etsy”+1 more

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticaltrustwallets.shopscore 74echoes trustwallet· active website
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Trust Wallet), confidence 93%. An opinion, not a finding.

Criticalcoinbasellyinvest.livescore 72echoes coinbase· active website
brand in the name “coinbase”page impersonates a brand “Coinbase”brand in page title, not in the name “outlook”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Criticalfidelitycrestcapital.clickscore 70echoes fidelity· active website
brand in the name “fidelity”TLD with a high abuse rate “click”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”+1 more

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Criticalamazon-invest.onlinescore 69echoes amazon· active website
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “amazon”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: Amazon), confidence 86%. An opinion, not a finding.

Criticalamazonhaul.storescore 69echoes amazon· active website
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Criticalshadowrocketapp.wikiscore 68· active website
free DNS provider “dnsowl.com”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Shadowrocket), confidence 65%. An opinion, not a finding.

Criticalpaypalcredit.onlinescore 67echoes paypal· active website
brand in the name “paypal”page impersonates a brand “PayPal”brand name and brand-styled page “paypal”

Model opinion: looks like phishing (target: PayPal), confidence 93%. An opinion, not a finding.

Criticallinkedyn.spacescore 66echoes linkedin· active website
one-letter brand typo “linkedyn≈linkedin”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: LinkedIn), confidence 60%. An opinion, not a finding.

Criticaladobedobe.sitescore 64echoes adobe· active website
brand in the name “adobe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “namecheap”

Model opinion: suspicious (target: Adobe), confidence 55%. An opinion, not a finding.

Criticaltiktokadsmanager.sitescore 63echoes tiktok· active website
brand in the name “tiktok”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: TikTok), confidence 95%. An opinion, not a finding.

Criticaltw-rakuten.shopscore 63echoes rakuten· active website
brand in the name “rakuten”brand name and brand-styled page “rakuten”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Rakuten), confidence 88%. An opinion, not a finding.

See all 838 high and critical rows for 2026-10-13

About this data

The census diffs the zone files ICANN's Centralized Zone Data Service publishes for about a thousand gTLDs, plus a sample of .com and .net, against the previous day. A birth is a name present today and absent yesterday; a death is the reverse. Births are probed once over HTTP with an identified user agent, robots.txt honoured, and classified by what came back. Subjects are assigned by a language model reading the page text. The risk scorer is deterministic and additive; its weights and word lists are public in the API's reasons field.

Aggregates and named rows are free as JSON: API docs. Per-domain answers are also on every domain report. Names in .com and .net are counted in every aggregate but not listed by name until the redistribution terms of that zone's access agreement are confirmed.