We detect every provider move as it happens. The count is easy. The useful part is
where the domains went. Below, 30 days of moves as net winners and
losers, with the actual routes. Net, never gross, because reporting arrivals as growth is how
vendor marketing lies, and it would be disprovable from our own signed data.
Provable
Every number here rolls up observations we continuously scan and Ed25519-sign, then
anchor on Base. Open any domain's signed x-ray, read the receipt, and
verify it against the on-chain anchor yourself. A signature proves
attribution and integrity; it is added trust, not a claim that a number is beyond question.
DNS provider 2,050 moves, 30d
Net winners and losers. A provider that gained 40 and lost 38 did not win 40, it churned - so the bar is net, and it can go either way.
Net winners and losers. A provider that gained 40 and lost 38 did not win 40, it churned - so the bar is net, and it can go either way.
google.com+74 +90 / -16
outlook.com+31 +74 / -43
cloudflare.net+24 +30 / -6
pphosted.com+22 +28 / -6
alltheemails.com+6 +12 / -6
ppe-hosted.com+6 +6 / -0
zoho.com+5 +8 / -3
timeweb.ru+5 +6 / -1
messagingengine.com+5 +5 / -0
hostingeniusmail.com+5 +5 / -0
zoho.eu+5 +5 / -0
hostedmxserver.com+4 +5 / -1
hornetsecurity.com+4 +5 / -1
mx.microsoft+4 +4 / -0
Where the domains actually went
trendmicro.com→pphosted.com14
h-email.net→alltheemails.com12
google.com + googlemail.com→google.com9
outlook.com→google.com8
outlook.com→cloudflare.net7
alltheemails.com→h-email.net6
outlook.com→pphosted.com5
google.com→outlook.com5
iphmx.com→outlook.com5
365cool.com→gov.cn4
pphosted.com→outlook.com4
mimecast.com→outlook.com4
yandex.net→google.com4
yandex.net→cloudflare.net4
co.il→outlook.com4
privateemail.com→registrar-servers.com4
gov.cn→365cool.com3
fireeyecloud.com→google.com3
registrar-servers.com→cloudflare.net3
outlook.com→mx.microsoft3
ne.jp→google.com3
outlook.com→hornetsecurity.com3
hostinger.com→hostinger.in3
cloudflare.net→google.com3
outlook.com→ppe-hosted.com3
CDN 58 moves, 30d
Net winners and losers. A provider that gained 40 and lost 38 did not win 40, it churned - so the bar is net, and it can go either way.
kunlunaq.com+2 +3 / -1
hichina.com+2 +2 / -0
gname.net+2 +2 / -0
cdnhwcaoc115.cn+1 +4 / -3
cdngslb.com+1 +2 / -1
faipod.com+1 +2 / -1
azionedge.net+1 +1 / -0
020999.cn+1 +1 / -0
mh456cfhc.uk+1 +1 / -0
bytedns3.com+1 +1 / -0
txdl1.com+1 +1 / -0
1zyaxfgsxq4g.com+1 +1 / -0
dnsv1.com+1 +1 / -0
kututu.cc+1 +1 / -0
Where the domains actually went
dnse3.com→cdnhwcaoc115.cn4
cdnhwc1.com→trpcdn.net4
trpcdn.net→cdnhwc1.com4
bytexns.com→alikunlun.com3
cdnhwcaoc115.cn→dnse3.com3
alikunlun.com→bytexns.com3
initaa.com→faipod.com2
alikunlun.com→kunlunaq.com2
mi.com→xiaomi.com1
cloudfront.net→azionedge.net1
xiaomi.com→mi.com1
cloudfront.net→cootek.com1
cootek.com→cloudfront.net1
rigol.com→cdngslb.com1
hzbanlan.cn→020999.cn1
manhua456.net→mh456cfhc.uk1
ulikecam.com→bytedns3.com1
5door.cn→hichina.com1
tznode301.com→gname.net1
amazonaws.com→cloudfront.net1
dnse5.com→txdl1.com1
qiniudns.com→1zyaxfgsxq4g.com1
myqcloud.com→dnsv1.com1
ffcdn.xyz→kututu.cc1
chengzhanheng.cn→flyingsteed.com1
A domain counts once per route it took, so a domain that flapped both ways nets
to zero, because it did. Counts are of the domains we continuously scan; latest day 2026-07-27, the latest day is still filling.