October 06, 2026
66 min read
We measured how much of 77 national namespaces depends on US-headquartered operators or US soil: per-domain web, mail and DNS for 65.5 million live websites, plus cloud regions, CDN points of presence, TLS certificates, ccTLD registries, routing, latency and 21,000 institutions. 43.9% of the live websites whose layers we could attribute have at least one layer run by a US-headquartered operator or sit on US soil, and the switching ran toward US operators: 2.8 mail moves onto a US-headquartered operator for every move off one, 2.4 for DNS. US soil and US ownership are different problems with different fixes. We end with a measured guide to who should move, where to, and who should not bother. For policymakers, registries, hosting providers and anyone running a website outside the US.
June 27, 2026
23 min read
The first edition of the Internet Concentration Index: a synthesis of four full-corpus, typed-DNS censuses of the same ~3-billion-name dataset, measuring who controls the Internet's core layers one domain at a time. DNS, email, cloud hosting and the CDN/proxy edge each have a different owner — GoDaddy, Google, Amazon and Cloudflare — no single company controls all four, the enterprise giant everyone names (Microsoft) is nearly invisible by domain count, and 92.5% of delegated domains sit on a single point of failure. For policymakers, security teams, and anyone who has watched one outage take down half the web.
June 20, 2026
24 min read
A CNAME record is a forwarding address — it names who actually serves a hostname. We pointed a CNAME-typed crawl at 1.86 billion names and found 297 million aliases. Of the 169 million that point outward, 41% land on site builders and managed hosts, 20% on domain-parking lots, and only 6% on CDNs — because Cloudflare, which fronts a quarter of the web, flattens its CNAMEs into A/AAAA and barely appears. The alias map is a rental map: the web is served by a short list of platforms, and the record type you query decides which half you can see.
June 13, 2026
18 min read
On 28 March 2026 IPv6 crossed half of Google's traffic — the eyeball Internet reached the majority. We pointed an AAAA-typed crawl at 315 million registry domains to measure the other half of the question, and the content Internet looks nothing like it: only 20.4% of domains publish any IPv6 address, Cloudflare alone generates 44.7% of it, and 45% of all domain IPv6 is a CDN edge in front of an origin that may still be IPv4-only. Strip the CDNs and origin-native IPv6 falls to 11%. This is server-side IPv6, measured from 1.88 billion DNS answers.
June 01, 2026
19 min read
We resolved the full DNS, MX, web-edge, and email-authentication stack of 500 Fortune 500 corporate domains against a May 2026 typed crawl. No single vendor owns enterprise DNS — 28% of the F500 still run their own. Proofpoint sits in front of 48% of mail-enabled inboxes. Akamai serves a third of the web edge. And the F500 enforce DMARC at 73% versus ~42% globally — yet MTA-STS reaches just 2.3%. This is the corporate Internet's plumbing, measured from the records themselves.