CONTINUOUS INTERNET TELEMETRY24H DRIFT2,490 material changesacross 2,262 domains · -908 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.com · -11 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -2 vs yesterdayNOW3,325 curated domains not answering-6,393 vs yesterdayERRORS10,915 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,490 material changesacross 2,262 domains · -908 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.com · -11 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -2 vs yesterdayNOW3,325 curated domains not answering-6,393 vs yesterdayERRORS10,915 responded with an errorlast probe · 5xx / 404 / 429 / 403

Who runs the internet

Not a leaderboard. Concentration. That a handful of companies answer, route, front and vouch for most of the web is a systemic-risk fact, and it is only a fact if you say what you measured it against. So every lane below carries its own denominator, because we know the DNS provider for far more domains than we know the certificate issuer, and pretending otherwise would flatter the numbers.

DNS

Who answers for the internet?

One provider covers half of it. The top 3 hold 95.9% of the 24,157 domains we can see this for.

Cloudflare 12,26950.8%
AWS Route 53 9,68140.1%
Google Cloud DNS 1,2645.2%
Azure DNS 9804.1%
Fly.io DNS 30.0%

Email

Who handles its mail? (a domain often uses several)

3 providers cover half of it. The top 3 hold 76.4% of the 24,645 domains we can see this for.

Google Workspace 10,51942.7%
Google (SPF sender) 9,21637.4%
Microsoft 365 7,25529.4%
Amazon SES 3,87615.7%
Zendesk 3,01312.2%
Salesforce 2,81511.4%
Proofpoint 2,77311.3%
SendGrid 2,48510.1%
HubSpot 1,9437.9%
Mailchimp 1,8427.5%
Mandrill (Mailchimp) 1,7727.2%
Mailgun 1,5736.4%
Mimecast 1,1124.5%
Brevo (Sendinblue) 3791.5%
Zoho Mail 2971.2%

CDN

Who sits in front of it?

One provider covers half of it. The top 3 hold 100.0% of the 39,019 domains we can see this for.

Cloudflare (proxied) 38,98899.9%
AWS CloudFront 300.1%
Fastly 160.0%

Certificate authorities

Who vouches for its identity?

2 providers cover half of it. The top 3 hold 55.7% of the 8,780 domains we can see this for.

Let's Encrypt 2,59129.5%
GlobalSign 2,29026.1%
Google Trust Services 1,88821.5%
DigiCert 1,60418.3%
Amazon 1,26114.4%
Starfield Technologies 1,16213.2%
Sectigo 8089.2%
The USERTRUST Network 6157.0%
GoDaddy.com 2793.2%
Internet2 780.9%
Entrust Limited 560.6%
ZeroSSL GmbH 540.6%
Hellenic Academic and Research Institutions CA 490.6%
GoDaddy 410.5%
Certainly 380.4%

Hosting networks

Whose machines is it actually on?

3 providers cover half of it. The top 3 hold 52.0% of the 38,223 domains we can see this for.

Cloudflare 10,23926.8%
Amazon 8,24221.6%
Akamai 1,4123.7%
Google 1,3283.5%
Fastly 1,3233.5%
Microsoft 1,1032.9%
Hetzner 5291.4%
Imperva 4511.2%
Alibaba 4011.0%
OVH 3751.0%
Automattic 2910.8%
DigitalOcean 2340.6%
HLL-AS - HLL 1870.5%
DDOS-GUARD - DDOS-GUARD 1470.4%
Oracle 1260.3%

A domain counts once per lane. Providers are collapsed to the company, not the label ("Cloudflare (proxied)" and "Cloudflare" are the same company wearing two hats). Domains where a lane could not be observed are excluded from that lane entirely, rather than counted as a zero: not knowing is not the same as nobody. Every figure comes from a signed observation you can re-verify.