Who's winning, and who is churning

Every provider move in the signed record, drawn as 30 days of net winners and losers with the routes the domains actually took. Net, never gross: a provider that gained forty and lost thirty-eight moved two.

Provable Every number here rolls up observations we continuously scan and Ed25519-sign, then anchor on Base - a signature proves attribution and integrity, added trust, not a claim that a number is beyond question. Open a domain's signed record, take a receipt id from it, then paste that id into the verifier: it checks the Ed25519 signature and resolves that window's root from Base. Both checks run in your own browser, against published keys.

DNS provider 6,861 moves, 30d

Net movement per provider. A provider that gained 40 and lost 38 did not gain 40, it churned - so the bar is net, and it can go either way.

A provider here is the registrable domain behind a domain's authoritative nameservers. Class chips are curated from evidence we verified; unclassified means we have not verified what that backend is.

Infrastructure adoption

Managed DNS, CDN, cloud and registrar nameservers. Domains moving here are choosing who serves their infrastructure - this group is the adoption story.

kirklanddc.comregistrar DNS +39
+1,924 / -1,885
koaladns.comregistrar DNS +32
+2,441 / -2,409
CloudflareCDN +6
+21 / -15
Namecheap default DNSregistrar DNS +2
+4 / -2
AkamaiCDN +1
+1 / -0

Aftermarket and lifecycle rotation

Parking landers and resale marketplaces. Domains arriving here are typically expiring, parked or entering resale - portfolio rotation, not provider adoption.

parity.domainsparking +2
+3 / -1
Afternicmarketplace +1
+1 / -0

Unclassified backends

Backends we have not verified. The absence of intel is stated, never guessed.

renewyourname.netunclassified +2
+2 / -0
bluehost.comunclassified +2
+2 / -0
turbolastmile.comunclassified +1
+1 / -0
j42k.com + vgalerie.comunclassified +1
+1 / -0
namebrightdns.comunclassified +1
+1 / -0
dnsv2.comunclassified +1
+1 / -0
com.peunclassified +1
+1 / -0

Where the domains actually went

Email provider 24 moves, 30d

Net movement per provider. A provider that gained 40 and lost 38 did not gain 40, it churned - so the bar is net, and it can go either way.

A provider here is the registrable domain behind a domain's mail exchangers. Class chips are curated from evidence we verified; unclassified means we have not verified what that backend is.

Infrastructure adoption

Managed DNS, CDN, cloud and registrar nameservers. Domains moving here are choosing who serves their infrastructure - this group is the adoption story.

Microsoft 365cloud +3
+4 / -1
Proofpointcloud +2
+2 / -0
Namecheap default DNSregistrar DNS +1
+1 / -0
Amazon Web Servicescloud +1
+1 / -0
Zoho Mailcloud +1
+1 / -0
Hostingercloud 0
+1 / -1
Proofpointcloud -1
+0 / -1

Unclassified backends

Backends we have not verified. The absence of intel is stated, never guessed.

alltheemails.comunclassified +4
+6 / -2
zoho.inunclassified +1
+1 / -0
realitymod.orgunclassified +1
+1 / -0
pp-tp.comunclassified +1
+1 / -0
mailspamprotection.comunclassified +1
+1 / -0
spamenmoins.comunclassified +1
+1 / -0
messagelabs.comunclassified -1
+0 / -1

Where the domains actually went

~ h-email.net 1

A domain counts once per route it took, so a domain that flapped both ways nets to zero, because it did. Counts are of the domains we continuously scan; latest day 2026-09-11, the latest day is still filling. Class chips and display names are curated from evidence we verified, never from the signature - the moves are signed, the classification is editorial. Each provider links to its intel page. The 24-hour view shows the same raw backends over the hot window.

CONTINUOUS INTERNET TELEMETRY24H DRIFT27,932 material changesacross 21,478 domains · 24h to ~6h agoROTATION57 domains moved DNS from magpiedns.com to koaladns.com, 48 moved backa rotation loop, not a migration · 24hREGISTRAR DRIFT1 changed registrar24hNOW647 curated domains not reachablelast probe, steadySITE ERRORS17,691 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 79,516 sites429 rate-limit / 403 bot-block, a posture signal