July 24, 2026
29 min read
We mapped a week of Google Trends spikes (US + Canada) against our Newly Observed Hostnames feed. A brand-new AI model was followed by a clean launch-day lookalike wave; a breach at a household-name AI company saw no measurable wave at all; and a two-hour Instagram outage saw none either — its phishing lives on free-hosting subdomains a registration feed never sees. Of 195 event-matched lookalikes, 94% resolve but only 30% are provisioned for email. For SOC teams, brand-protection researchers, and threat-intelligence analysts.
July 23, 2026
22 min read
We followed the NS delegation of every apex domain across nine full crawls, April 2025 - July 2026 (404 million apexes). 61% of the web kept the exact same nameservers for fifteen months; operator switching runs at 2.3% a month; and the biggest moves were corporate re-plumbs - GoDaddy consolidating 2.1 million NameFind domains onto Afternic, Namecheap shifting 1.1 million parked names to an undocumented platform in one month. Meanwhile 339,000 domains still delegate to the retired Dan.com. For DNS operators, security teams, and Internet measurement researchers.
July 18, 2026
21 min read
We re-classified 18 billion DNS TXT queries across ten full crawls (April 2025 - July 2026) and turned the SaaS verification-token census into a time series. Anthropic tokens grew 625x to 131,812 apexes. The Dan.com shutdown moved five million marketplace tokens. Microsoft 365's domain share is flat while Google's climbs. And across every major vendor, only 19-29% of token disappearances are deliberate cleanup - the rest is domain death. For SaaS analysts, security teams, and Internet measurement researchers.
July 11, 2026
17 min read
Two CNAME-typed crawls of 1.9 billion hostnames, 32 days apart: 169 million cross-domain aliases followed by name. 7.5% of the alias layer rewires or disappears in one month, parking lost 1.54M aliases, one Chinese registrar generated 13% of all new aliases — and the three biggest 'migrations' were platforms re-pointing their own chains, dragging half a million customer domains along. For DNS operators, measurement researchers, and anyone who builds on someone else's CNAME.
July 02, 2026
18 min read
We followed every one of the 181.1 million domains that resolved in April 2023 across 26 DNS snapshots to June 2026, and did the same for a 246.8-million-domain 2025 cohort. The resolving web loses 13-15% of itself every year — a half-life of roughly five years — but the deaths are wildly unequal: Freenom's five TLDs went 99% extinct in the largest die-off ever recorded in the DNS, the cheap-promo gTLDs lose up to 95% of their web in three years, and Germany's .de keeps 84% alive. For registrars, investors, security teams, and anyone who links to anything.
June 27, 2026
23 min read
The first edition of the Internet Concentration Index: a synthesis of four full-corpus, typed-DNS censuses of the same ~3-billion-name dataset, measuring who controls the Internet's core layers one domain at a time. DNS, email, cloud hosting and the CDN/proxy edge each have a different owner — GoDaddy, Google, Amazon and Cloudflare — no single company controls all four, the enterprise giant everyone names (Microsoft) is nearly invisible by domain count, and 92.5% of delegated domains sit on a single point of failure. For policymakers, security teams, and anyone who has watched one outage take down half the web.
June 26, 2026
21 min read
We replayed 26 monthly snapshots of where the world's domains resolve — 38 months of A-record and geoIP data, Apr 2023 to Jun 2026 — counted one domain one vote across tens of millions of apexes per month. The expected story was de-Americanization and cloud consolidation. The data tells a stranger one: the geographic map barely moved. The United States hosted 45.9% of resolving domains in 2023 and 45.2% in 2026. The only line that climbed is the anycast bucket that hides where a domain truly lives, and the only provider that genuinely surged is Amazon, which tripled its footprint while its share of cloud spending fell. This is the first longitudinal post in the series.
June 25, 2026
20 min read
We crossed two full-corpus DNS censuses of the same May 2026 crawl — the MX layer that names who runs each domain's mail, and the SPF/DMARC/MTA-STS/BIMI layer that says whether that mail is authenticated. Across 149.8 million mail-capable apex domains, email-authentication posture turns out to be inherited from the provider, not chosen by the owner: security gateways and Microsoft 365 run the credible anti-spoofing stack on 17–19% of their domains, while the four largest registrar-bundled hosts — IONOS, Hostinger, Namecheap, OVH — run it on under 1.2%, and the largest email category on the Internet stops spoofing on just 3.5% of its 46.7 million domains. The 9% that actually resist spoofing are not spread across the Internet; they cluster behind a handful of operators.
June 23, 2026
18 min read
We pointed an NS-typed crawl at 301 million registry domains to ask who actually answers the first question of every web request. 277.6 million are delegated, and the answer is concentrated: registrar-bundled DNS runs nearly half the delegated web, GoDaddy leads at 18.9% as the default nobody chose, and Cloudflare follows at 13.9% as the operator everybody migrates to — more than every hyperscaler cloud combined. Beneath the leaderboard sits a quieter finding: 92.5% of delegated domains depend on a single DNS organization with no independent backup. Built from 151 million-plus apex NS records.
June 21, 2026
20 min read
We pointed an MX-typed crawl at 390 million registered domains to ask who actually handles the Internet's email. Only 38.7% can receive mail at all. Among those that can, Google Workspace leads Microsoft 365 by 1.4 to 1 (13.2% vs 9.4%) — the inverse of the enterprise market — yet both are dwarfed by registrar- and host-bundled email, which serves nearly a third of all mail-capable domains directly and most of the long tail besides. The result is a geographic map: Google owns the Americas and the developer world, Microsoft owns Northern Europe and the Commonwealth, and domestic hosts own their home ccTLDs. Built from 151 million apex MX records.