CONTINUOUS INTERNET TELEMETRY24H3,981 material changesacross 3,214 domains · +6 vs yesterdayMOVES44 domains changed DNS providertop destination dns.br · +5 vs yesterdayMOVES13 domains switched email providertop destination mimecast.com · +1 vs yesterdayTLS12 domains switched issuing CA24h · -3 vs yesterdayNOW9,764 curated domains not answeringlast probe, steadyMOVERgov.brDNS provider changed: gov.br → dns.br24H3,981 material changesacross 3,214 domains · +6 vs yesterdayMOVES44 domains changed DNS providertop destination dns.br · +5 vs yesterdayMOVES13 domains switched email providertop destination mimecast.com · +1 vs yesterdayTLS12 domains switched issuing CA24h · -3 vs yesterdayNOW9,764 curated domains not answeringlast probe, steadyMOVERgov.brDNS provider changed: gov.br → dns.br

Who runs the internet

Not a leaderboard. Concentration. That a handful of companies answer, route, front and vouch for most of the web is a systemic-risk fact, and it is only a fact if you say what you measured it against. So every lane below carries its own denominator, because we know the DNS provider for far more domains than we know the certificate issuer, and pretending otherwise would flatter the numbers.

DNS

Who answers for the internet?

One provider covers half of it. The top 3 hold 95.9% of the 24,141 domains we can see this for.

Cloudflare 12,25750.8%
AWS Route 53 9,67640.1%
Google Cloud DNS 1,2665.2%
Azure DNS 9794.1%
Fly.io DNS 30.0%

Email

Who handles its mail? (a domain often uses several)

2 providers cover half of it. The top 3 hold 75.7% of the 24,201 domains we can see this for.

Google Workspace 10,50643.4%
Microsoft 365 7,24429.9%
Google (SPF sender) 5,00920.7%
Google (SPF) 4,30417.8%
Amazon SES 3,87916.0%
Proofpoint 2,63610.9%
SendGrid 2,48610.3%
Zendesk 1,6506.8%
Mailgun 1,5716.5%
Salesforce 1,5376.4%
Mimecast 1,1114.6%
HubSpot 1,0884.5%
Mandrill (Mailchimp) 1,0284.2%
Mailchimp 1,0134.2%
Zoho Mail 2971.2%

CDN

Who sits in front of it?

One provider covers half of it. The top 3 hold 100.0% of the 39,038 domains we can see this for.

Cloudflare (proxied) 39,00799.9%
AWS CloudFront 300.1%
Fastly 160.0%

Certificate authorities

Who vouches for its identity?

2 providers cover half of it. The top 3 hold 56.8% of the 9,156 domains we can see this for.

Let's Encrypt 2,86531.3%
GlobalSign 2,33325.5%
Google Trust Services 2,04922.4%
DigiCert 1,72018.8%
Amazon 1,42115.5%
Starfield Technologies 1,16412.7%
Sectigo 8709.5%
The USERTRUST Network 6156.7%
GoDaddy.com 2953.2%
ZeroSSL GmbH 790.9%
Internet2 790.9%
Entrust Limited 660.7%
Hellenic Academic and Research Institutions CA 520.6%
GoDaddy 410.4%
Certainly 390.4%

Hosting networks

Whose machines is it actually on?

3 providers cover half of it. The top 3 hold 52.4% of the 39,083 domains we can see this for.

Cloudflare 10,54327.0%
Amazon 8,47521.7%
Akamai 1,4473.7%
Fastly 1,3683.5%
Google 1,3623.5%
Microsoft 1,1282.9%
Hetzner 5251.3%
Imperva 4671.2%
Alibaba 4031.0%
OVH 3821.0%
Automattic 3010.8%
DigitalOcean 2360.6%
HLL-AS - HLL 1870.5%
DDOS-GUARD - DDOS-GUARD 1450.4%
Oracle 1260.3%

A domain counts once per lane. Providers are collapsed to the company, not the label ("Cloudflare (proxied)" and "Cloudflare" are the same company wearing two hats). Domains where a lane could not be observed are excluded from that lane entirely, rather than counted as a zero: not knowing is not the same as nobody. Every figure comes from a signed observation you can re-verify.