CONTINUOUS INTERNET TELEMETRY24H DRIFT6,015 material changesacross 5,856 domains · last 24h · -2,819 vs yesterdayDNS DRIFT172 domains changed DNS providertop destination cloudflare.com · -105 vs yesterdayEMAIL DRIFT43 domains switched email providertop destination outlook.com · -11 vs yesterdayCERT DRIFT57 domains switched issuing CA24h · -16 vs yesterdayNOW485 curated domains not reachable-72 vs yesterdaySITE ERRORS34,106 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 144,879 sites429 rate-limit / 403 bot-block, a posture signal

Who's winning, and who is churning

We detect every provider move as it happens. The count is easy. The useful part is where the domains went. Below, 30 days of moves as net winners and losers, with the actual routes. Net, never gross, because reporting arrivals as growth is how vendor marketing lies, and it would be disprovable from our own signed data.

Provable Every number here rolls up observations we continuously scan and Ed25519-sign, then anchor on Base. Open any domain's signed x-ray, read the receipt, and verify it against the on-chain anchor yourself. A signature proves attribution and integrity; it is added trust, not a claim that a number is beyond question.

DNS provider 2,050 moves, 30d

Net winners and losers. A provider that gained 40 and lost 38 did not win 40, it churned - so the bar is net, and it can go either way.

parity.domains +327
+352 / -25
brainydns.com +31
+69 / -38
spaceship.net +28
+34 / -6
parklogic.com +23
+39 / -16
alidns.com +22
+51 / -29
registrar-servers.com +19
+49 / -30
selectel.ru +19
+38 / -19
gname-dns.com +15
+22 / -7
abovedomains.com +12
+23 / -11
park-my-domain.net +8
+11 / -3
akam.net +6
+11 / -5
artegence.com + artegence.pl + efigence.com +6
+6 / -0
dnsowl.com +5
+9 / -4
timeweb.org + timeweb.ru +5
+7 / -2

Where the domains actually went

cloudflare.com parity.domains 337
domaincontrol.com cloudflare.com 39
hichina.com alidns.com 31
cloudflare.com registrar-servers.com 30
kirklanddc.com brainydns.com 29
magpiedns.com brainydns.com 28
cloudflare.com domaincontrol.com 25
dns-parking.com cloudflare.com 22
cloudflare.com spaceship.net 18
share-dns.com + share-dns.net parklogic.com 17
parity.domains cloudflare.com 16
registrar-servers.com cloudflare.com 13
brainydns.com kirklanddc.com 13
share-dns.com + share-dns.net gname-dns.com 13
ovh.net cloudflare.com 13
cloudflare.com dns-parking.com 13
cloudflare.com abovedomains.com 13
brainydns.com koaladns.com 12
brainydns.com magpiedns.com 12
cloudflare.com namecheaphosting.com 12
koaladns.com brainydns.com 11
cloudflare.com parklogic.com 11
alidns.com dnsv4.com 10
hichina.com cloudflare.com 10
storm-pro.net cloudflare.com 10

Email provider 551 moves, 30d

Net winners and losers. A provider that gained 40 and lost 38 did not win 40, it churned - so the bar is net, and it can go either way.

google.com +74
+90 / -16
outlook.com +31
+74 / -43
cloudflare.net +24
+30 / -6
pphosted.com +22
+28 / -6
alltheemails.com +6
+12 / -6
ppe-hosted.com +6
+6 / -0
zoho.com +5
+8 / -3
timeweb.ru +5
+6 / -1
messagingengine.com +5
+5 / -0
hostingeniusmail.com +5
+5 / -0
zoho.eu +5
+5 / -0
hostedmxserver.com +4
+5 / -1
hornetsecurity.com +4
+5 / -1
mx.microsoft +4
+4 / -0

Where the domains actually went

trendmicro.com pphosted.com 14
h-email.net alltheemails.com 12
google.com + googlemail.com google.com 9
outlook.com google.com 8
outlook.com cloudflare.net 7
alltheemails.com h-email.net 6
outlook.com pphosted.com 5
google.com outlook.com 5
iphmx.com outlook.com 5
365cool.com gov.cn 4
pphosted.com outlook.com 4
mimecast.com outlook.com 4
yandex.net google.com 4
yandex.net cloudflare.net 4
co.il outlook.com 4
privateemail.com registrar-servers.com 4
gov.cn 365cool.com 3
fireeyecloud.com google.com 3
registrar-servers.com cloudflare.net 3
outlook.com mx.microsoft 3
ne.jp google.com 3
outlook.com hornetsecurity.com 3
hostinger.com hostinger.in 3
cloudflare.net google.com 3
outlook.com ppe-hosted.com 3

CDN 58 moves, 30d

Net winners and losers. A provider that gained 40 and lost 38 did not win 40, it churned - so the bar is net, and it can go either way.

kunlunaq.com +2
+3 / -1
hichina.com +2
+2 / -0
gname.net +2
+2 / -0
cdnhwcaoc115.cn +1
+4 / -3
cdngslb.com +1
+2 / -1
faipod.com +1
+2 / -1
azionedge.net +1
+1 / -0
020999.cn +1
+1 / -0
mh456cfhc.uk +1
+1 / -0
bytedns3.com +1
+1 / -0
txdl1.com +1
+1 / -0
1zyaxfgsxq4g.com +1
+1 / -0
dnsv1.com +1
+1 / -0
kututu.cc +1
+1 / -0

Where the domains actually went

dnse3.com cdnhwcaoc115.cn 4
cdnhwc1.com trpcdn.net 4
trpcdn.net cdnhwc1.com 4
bytexns.com alikunlun.com 3
cdnhwcaoc115.cn dnse3.com 3
alikunlun.com bytexns.com 3
initaa.com faipod.com 2
alikunlun.com kunlunaq.com 2
mi.com xiaomi.com 1
cloudfront.net azionedge.net 1
xiaomi.com mi.com 1
cloudfront.net cootek.com 1
cootek.com cloudfront.net 1
rigol.com cdngslb.com 1
hzbanlan.cn 020999.cn 1
manhua456.net mh456cfhc.uk 1
ulikecam.com bytedns3.com 1
5door.cn hichina.com 1
tznode301.com gname.net 1
amazonaws.com cloudfront.net 1
dnse5.com txdl1.com 1
qiniudns.com 1zyaxfgsxq4g.com 1
myqcloud.com dnsv1.com 1
ffcdn.xyz kututu.cc 1
chengzhanheng.cn flyingsteed.com 1

A domain counts once per route it took, so a domain that flapped both ways nets to zero, because it did. Counts are of the domains we continuously scan; latest day 2026-07-27, the latest day is still filling.