CONTINUOUS INTERNET TELEMETRY24H DRIFT4,814 material changesacross 4,666 domains · last 24h · -4,020 vs yesterdayDNS DRIFT144 domains changed DNS providertop destination cloudflare.com · -133 vs yesterdayEMAIL DRIFT33 domains switched email providertop destination outlook.com · -21 vs yesterdayCERT DRIFT47 domains switched issuing CA24h · -26 vs yesterdayNOW489 curated domains not reachable-68 vs yesterdaySITE ERRORS34,115 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 144,635 sites429 rate-limit / 403 bot-block, a posture signal

The state of the internet's infrastructure

Who runs the internet's DNS, email and certificates, and how much of it answers on IPv6 - measured across 1,984,974 domains we scan continuously, as of 2026-07-28. Not a survey and not an estimate: a direct count, each domain a signed observation.

Provable Every number here rolls up observations we continuously scan and Ed25519-sign, then anchor on Base. Open any domain's signed x-ray, read the receipt, and verify it against the on-chain anchor yourself. A signature proves attribution and integrity; it is added trust, not a claim that a number is beyond question.

DNS providers share of the scanned corpus

Cloudflare 35.8% 710,556
AWS Route 53 6.7% 132,701
GoDaddy 5.9% 116,738
Namecheap 1.7% 33,737
Google Cloud DNS 1.4% 27,081
OVH 0.9% 17,839
Network Solutions 0.9% 17,656
Azure DNS 0.9% 17,529

Email providers share of the scanned corpus

Google Workspace 14.7% 292,760
Microsoft 365 11.4% 225,977
Google (SPF sender) 11% 218,405
Amazon SES 2.9% 56,746
SendGrid 2.4% 48,105
Mailgun 2.3% 44,758
Mailchimp 2.2% 42,797
Mandrill (Mailchimp) 1.7% 34,667

Certificate authorities share of the scanned corpus

Let's Encrypt 4.2% 82,759
DigiCert 2.7% 54,126
Google Trust Services 2.6% 51,218
Comodo 2.1% 42,502
SSL.com 2% 39,370
Sectigo 1.1% 21,431
AWS Certificate Manager 0.8% 16,614
GlobalSign 0.6% 11,943

IPv6 adoption

36.9%of the domains we scan answer on IPv6 (731,905)
IPv6 36.9%IPv4 only 63.1%

Share is of the domains we continuously scan, so it tracks the observable corpus, not the whole internet. This is today's snapshot; the day-by-day series is accruing now and becomes a trend line over the coming weeks. Some surfaces (CDN and protocol adoption) are held back until their detection covers enough of the corpus to report honestly.