AT&T's Big TXT Purge, and CDN77 Poaches a Couple of Bunnies

Out of roughly 3,990 changes tracked in the last day, one domain's DNS record makes for a genuinely fun read: att.com just did a serious TXT record purge.

att.com's verification record bonfire

In a single update, att.com removed a wall of TXT records tied to third-party tools — Dynatrace (four separate site-verification tokens), Tailscale, Apple domain verification, Box, Canva, Censys, Cisco, Docker, Figma, Flexera, Formstack, HashiCorp Cloud, MongoDB, OneTrust, Palo Alto Networks, Postman, Safebreach, and Smartsheet, among others. That's the kind of cleanup that usually means either a SaaS offboarding sweep or someone finally tidying up years of accumulated "prove you own this domain" tokens that nobody remembered to remove. Either way, it's a good reminder that TXT records quietly become a graveyard of every tool your org has ever tried.

CDN77 picks off a couple of Bunnies

Two sites jumped from BunnyCDN over to CDN77 today: www.franki.berlin (previously on BunnyCDN's AS20326/AS200325, now fronted by CDN77 with AS60068 added into the mix) and www.roboca.com, which went from a bare AS20326 presence to a full CDN77 setup across AS60068 and AS200325. Two migrations isn't a trend, but it's a neat little snapshot of CDN churn happening in real time.

vantriestbv.nl quietly exits Microsoft 365

This Dutch domain was one of today's two "flappers" (three changes each, alongside totaalkantoorinrichting.nl), and the story in its record history is pretty clear: it dropped its Outlook mail-protection MX target, swapped nameservers from ns01/02.hostnet.nl to dns1/2.registrar-servers.com, and rewrote its SPF record to drop include:spf.protection.outlook.com along with Exclaimer and AFAS includes. Google and Microsoft site-verification TXT tags vanished too. Looks like a full platform migration away from Microsoft 365, not just a DNS tidy-up.

Other things worth a glance

hmh.org moved off Sucuri (dropping the CDN/WAF classification entirely) and added an SPF include for sendgrid.net — a mail-sending change riding along with an infrastructure shift.
www.schoendbenkco.shop left Shopify (shops.myshopify.com CNAME gone) and landed on nameservers at ns1/2.ns306.parklogic.com, with its CAA records stripped — a pattern that often shows up when a storefront gets abandoned and the domain drifts into parking.
ergontech.com.br switched nameservers to ns1/2.guiadossites.com.br and swapped its outbound mail SPF from relay.mailbaby.net to spf-c.mailbaby.net, alongside an ASN move from AS262415 to AS16276 — a tidy little full-stack migration.