September 05, 2026
28 min read
We kept the exact TTL of every A record in 28 full crawls of the DomainsProject corpus, April 2023 to August 2026 — 43.6 billion DNS answers, 6.9 billion of them the address record of a registrable domain. The share of domains whose address expires in five minutes or less rose from 21.27% to 27.28%, and among live (non-parked) sites from 23.00% to 34.03%, almost all of it since March 2025. But 60.8% of surviving domains publish the same value 40 months later: GoDaddy's domaincontrol.com (mode 600) and Cloudflare (mode 300, 89% of its zones) set the number for a third of the web, and Cloudflare alone accounts for 47% of every domain at five minutes or less. For DNS and platform operators, SRE and incident-response teams, and Internet measurement researchers.
August 20, 2026
39 min read
We followed the MX record of every apex domain across eleven full crawls, April 2025 - August 2026 (421.9 million apexes). 70.8% of mail-capable domains sit on the bit-identical MX record set sixteen months later; provider switching runs under 1% a month. Google Workspace's lead over Microsoft 365 widened at every single pass (1.28 to 1.43 by domain count) - yet direct switching between the two is a wash; the gap is made by new domains, which arrive 2.3-to-1 for Google, while Microsoft wins the migrations out of self-hosting. Null MX quadrupled from 3.4M to 13.4M domains, and 77% of it is one aftermarket platform's zone template. For email and security teams, hosting providers, and Internet measurement researchers.
July 24, 2026
29 min read
We mapped a week of Google Trends spikes (US + Canada) against our Newly Observed Hostnames feed. A brand-new AI model was followed by a clean launch-day lookalike wave; a breach at a household-name AI company saw no measurable wave at all; and a two-hour Instagram outage saw none either — its phishing lives on free-hosting subdomains a registration feed never sees. Of 195 event-matched lookalikes, 94% resolve but only 30% are provisioned for email. For SOC teams, brand-protection researchers, and threat-intelligence analysts.
July 23, 2026
22 min read
We followed the NS delegation of every apex domain across nine full crawls, April 2025 - July 2026 (404 million apexes). 61% of the web kept the exact same nameservers for fifteen months; operator switching runs at 2.3% a month; and the biggest moves were corporate re-plumbs - GoDaddy consolidating 2.1 million NameFind domains onto Afternic, Namecheap shifting 1.1 million parked names to an undocumented platform in one month. Meanwhile 339,000 domains still delegate to the retired Dan.com. For DNS operators, security teams, and Internet measurement researchers.
July 18, 2026
21 min read
We re-classified 18 billion DNS TXT queries across ten full crawls (April 2025 - July 2026) and turned the SaaS verification-token census into a time series. Anthropic tokens grew 625x to 131,812 apexes. The Dan.com shutdown moved five million marketplace tokens. Microsoft 365's domain share is flat while Google's climbs. And across every major vendor, only 19-29% of token disappearances are deliberate cleanup - the rest is domain death. For SaaS analysts, security teams, and Internet measurement researchers.
July 11, 2026
17 min read
Two CNAME-typed crawls of 1.9 billion hostnames, 32 days apart: 169 million cross-domain aliases followed by name. 7.5% of the alias layer rewires or disappears in one month, parking lost 1.54M aliases, one Chinese registrar generated 13% of all new aliases — and the three biggest 'migrations' were platforms re-pointing their own chains, dragging half a million customer domains along. For DNS operators, measurement researchers, and anyone who builds on someone else's CNAME.
July 03, 2026
20 min read
We logged 1,348,706 requests across two production web properties for 174 days and classified every user-agent. AI crawlers now generate 7.2% of all observed traffic — more than Googlebot, Bingbot, DuckDuckBot, Baiduspider, and PetalBot combined. OpenAI alone accounts for 38% of the AI crawl, 69% of AI requests still feed training pipelines, and a robots.txt honeypot shows 99% of AI-crawler violations trace to a single bot. For publishers, infrastructure teams, and anyone deciding what to do about the new tenants of the crawl economy.
June 23, 2026
18 min read
We pointed an NS-typed crawl at 301 million registry domains to ask who actually answers the first question of every web request. 277.6 million are delegated, and the answer is concentrated: registrar-bundled DNS runs nearly half the delegated web, GoDaddy leads at 18.9% as the default nobody chose, and Cloudflare follows at 13.9% as the operator everybody migrates to — more than every hyperscaler cloud combined. Beneath the leaderboard sits a quieter finding: 92.5% of delegated domains depend on a single DNS organization with no independent backup. Built from 151 million-plus apex NS records.
June 22, 2026
20 min read
India has 954 million internet users and the world's second-highest IPv6 capability — 78% of its users can reach the modern Internet, and Reliance Jio's all-IP network runs at ~95%. We then crawled its national namespace: 20.2 million .in hostnames, 10.2 million resolving across forward-DNS, MX, AAAA, NS, DMARC and IP-to-ASN data. The content layer tells the opposite story. Only 20% of .in domains are hosted on Indian soil — the United States alone hosts twice as much; only 20% offer IPv6 despite the world-class access network; Amazon AWS is the single largest operator of the Indian web. India consumes the Internet on world-class rails and publishes it on borrowed ground.
June 21, 2026
20 min read
We pointed an MX-typed crawl at 390 million registered domains to ask who actually handles the Internet's email. Only 38.7% can receive mail at all. Among those that can, Google Workspace leads Microsoft 365 by 1.4 to 1 (13.2% vs 9.4%) — the inverse of the enterprise market — yet both are dwarfed by registrar- and host-bundled email, which serves nearly a third of all mail-capable domains directly and most of the long tail besides. The result is a geographic map: Google owns the Americas and the developer world, Microsoft owns Northern Europe and the Commonwealth, and domestic hosts own their home ccTLDs. Built from 151 million apex MX records.