Hidden portfolios, revealed by their moves

When dozens of domains make the exact same infrastructure move on the exact same day, they are almost never unrelated. That is a portfolio, a bulk migration, or a shared operator - a fingerprint you can only see by watching everything at once, continuously.

Provable Every number here rolls up observations we continuously scan and Ed25519-sign, then anchor on Base - a signature proves attribution and integrity, added trust, not a claim that a number is beyond question.

85 domainsdns

all made the identical move
kirklanddc.com → magpiedns.com

same day · 2026-09-14

84 domainsdns

all made the identical move
magpiedns.com → kirklanddc.com

same day · 2026-09-14

82 domainsdns

all made the identical move
ns1.magpiedns.com, ns2.magpiedns.com → ns2.kirklanddc.com, ns1.kirklanddc.com

same day · 2026-09-14

82 domainsdns

all made the identical move
ns2.kirklanddc.com, ns1.kirklanddc.com → ns2.magpiedns.com, ns1.magpiedns.com

same day · 2026-09-14

82 domainsdns

all made the identical move
ns2.kirklanddc.com, ns1.kirklanddc.com → ns1.magpiedns.com, ns2.magpiedns.com

same day · 2026-09-14

81 domainsdns

all made the identical move
koaladns.com → kirklanddc.com

same day · 2026-09-13

81 domainsdns

all made the identical move
magpiedns.com → koaladns.com

same day · 2026-09-12

81 domainsdns

all made the identical move
koaladns.com → magpiedns.com

same day · 2026-09-12

81 domainsdns

all made the identical move
koaladns.com → kirklanddc.com

same day · 2026-09-11

81 domainsdns

all made the identical move
koaladns.com → magpiedns.com

same day · 2026-09-11

81 domainsdns

all made the identical move
kirklanddc.com → koaladns.com

same day · 2026-09-11

80 domainsdns

all made the identical move
ns1.magpiedns.com, ns2.magpiedns.com → ns1.kirklanddc.com, ns2.kirklanddc.com

same day · 2026-09-14

80 domainsdns

all made the identical move
ns1.kirklanddc.com, ns2.kirklanddc.com → ns1.magpiedns.com, ns2.magpiedns.com

same day · 2026-09-14

80 domainsdns

all made the identical move
kirklanddc.com → koaladns.com

same day · 2026-09-13

80 domainsdns

all made the identical move
magpiedns.com → koaladns.com

same day · 2026-09-13

80 domainsdns

all made the identical move
koaladns.com → kirklanddc.com

same day · 2026-09-12

80 domainsdns

all made the identical move
kirklanddc.com → koaladns.com

same day · 2026-09-12

80 domainsdns

all made the identical move
magpiedns.com → koaladns.com

same day · 2026-09-11

80 domainsdns

all made the identical move
kirklanddc.com → magpiedns.com

same day · 2026-09-11

80 domainsdns

all made the identical move
kirklanddc.com → koaladns.com

same day · 2026-09-10

80 domainsdns

all made the identical move
koaladns.com → kirklanddc.com

same day · 2026-09-10

80 domainsdns

all made the identical move
koaladns.com → magpiedns.com

same day · 2026-09-10

80 domainsdns

all made the identical move
magpiedns.com → koaladns.com

same day · 2026-09-09

80 domainsdns

all made the identical move
koaladns.com → kirklanddc.com

same day · 2026-09-09

80 domainsdns

all made the identical move
koaladns.com → magpiedns.com

same day · 2026-09-09

A cohort is 3 or more domains that made the identical change the same UTC day; cohort_size is the exact, uncapped count. Transient reachability blips are excluded so the real portfolios lead. Full cohort membership is on the signed API.