Who's winning, and who is churning

Every provider move in the signed record, drawn as 30 days of net winners and losers with the routes the domains actually took. Net, never gross: a provider that gained forty and lost thirty-eight moved two.

Provable Every number here rolls up observations we continuously scan and Ed25519-sign, then anchor on Base - a signature proves attribution and integrity, added trust, not a claim that a number is beyond question. Open a domain's signed record, take a receipt id from it, then paste that id into the verifier: it checks the Ed25519 signature and resolves that window's root from Base. Both checks run in your own browser, against published keys.

DNS provider 11,001 moves, 30d

Net movement per provider. A provider that gained 40 and lost 38 did not gain 40, it churned - so the bar is net, and it can go either way.

A provider here is the registrable domain behind a domain's authoritative nameservers. Class chips are curated from evidence we verified; unclassified means we have not verified what that backend is.

Infrastructure adoption

Managed DNS, CDN, cloud and registrar nameservers. Domains moving here are choosing who serves their infrastructure - this group is the adoption story.

koaladns.comregistrar DNS +56
+3,619 / -3,563
CloudflareCDN +32
+54 / -22
magpiedns.comregistrar DNS +29
+3,044 / -3,015
Spaceshipregistrar DNS +2
+5 / -3
Selectelcloud +2
+2 / -0

Aftermarket and lifecycle rotation

Parking landers and resale marketplaces. Domains arriving here are typically expiring, parked or entering resale - portfolio rotation, not provider adoption.

ParkLogicparking +8
+9 / -1
Afternicmarketplace +1
+3 / -2

Unclassified backends

Backends we have not verified. The absence of intel is stated, never guessed.

park-my-domain.netunclassified +4
+5 / -1
share-dns.com + share-dns.netunclassified +2
+9 / -7
nic.ruunclassified +2
+2 / -0
beget.comunclassified +2
+2 / -0
dns-expired.comunclassified +1
+2 / -1
vercel-dns.comunclassified +1
+1 / -0
dipcon.com + ports.net + ports.seunclassified +1
+1 / -0

Where the domains actually went

Email provider 40 moves, 30d

Net movement per provider. A provider that gained 40 and lost 38 did not gain 40, it churned - so the bar is net, and it can go either way.

A provider here is the registrable domain behind a domain's mail exchangers. Class chips are curated from evidence we verified; unclassified means we have not verified what that backend is.

Infrastructure adoption

Managed DNS, CDN, cloud and registrar nameservers. Domains moving here are choosing who serves their infrastructure - this group is the adoption story.

Googlecloud +10
+11 / -1
Namecheap default DNSregistrar DNS +1
+1 / -0
CloudflareCDN +1
+1 / -0

Unclassified backends

Backends we have not verified. The absence of intel is stated, never guessed.

localhostunclassified +2
+2 / -0
ostersund.seunclassified +1
+1 / -0
purelymail.comunclassified +1
+1 / -0
feishu.cnunclassified +1
+1 / -0
g-cloud.byunclassified +1
+1 / -0
nmedmcc.ae + novatek.ruunclassified +1
+1 / -0
alltheemails.comunclassified +1
+1 / -0
novumbankgroup.comunclassified +1
+1 / -0
daakiaa.comunclassified +1
+1 / -0
stackmail.comunclassified +1
+1 / -0

Where the domains actually went

Google → Google 3
Google → Google 1
co.jp → Google 1
one.com → Google 1
~ → \~ 1

CDN 1 moves, 30d

Net movement per provider. A provider that gained 40 and lost 38 did not gain 40, it churned - so the bar is net, and it can go either way.

A provider here is the registrable domain behind a domain's CDN hostnames. Class chips are curated from evidence we verified; unclassified means we have not verified what that backend is.

Unclassified backends

Backends we have not verified. The absence of intel is stated, never guessed.

kmnode301.comunclassified +1
+1 / -0
gname.netunclassified -1
+0 / -1

Where the domains actually went

A domain counts once per route it took, so a domain that flapped both ways nets to zero, because it did. Counts are of the domains we continuously scan; latest day 2026-10-27, the latest day is still filling. Class chips and display names are curated from evidence we verified, never from the signature - the moves are signed, the classification is editorial. Each provider links to its intel page. The 24-hour view shows the same raw backends over the hot window.

CONTINUOUS INTERNET TELEMETRY24H DRIFT7,863 material changesacross 376 domains · 24h to ~3h ago · -322 vs yesterdayROTATION48 domains moved DNS from koaladns.com to magpiedns.com, 47 moved backa rotation loop, not a migration · 24hREGISTRAR DRIFT2 changed registrar24hNOW1,209 curated domains not reachablelast probe, steadySITE ERRORS20,005 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 87,479 sites429 rate-limit / 403 bot-block, a posture signal