July 26, 2026

Flipkart's Big DNS Spring Cleaning, Plus a French Hosting Exodus

Out of 8,515 changes tracked across 8.16 million domains in the last 24 hours (plus 801,627 brand-new domains showing up), a few stood out from the noise.

Flipkart does some serious housekeeping

www.flipkart.com had one of the busiest single records we've seen: it dropped its old CAA policy (which had explicitly listed DigiCert, GlobalSign, and Let's Encrypt as allowed issuers) and wiped out a genuinely huge pile of legacy TXT verification strings — old GlobalSign, Atlassian, SuccessFactors, OneTrust, Adobe, and Google site-verification tokens, plus an old SPF record listing a long list of ip4/ip6 ranges. In their place: new MX records pointing to eu-smtp-inbound-1.mimecast.com and eu-smtp-inbound-2.mimecast.com, and the hosting classification flipped from unknown to Akamai (AS9752, AS20940), with the old UltraDNS nameservers (sdns14.ultradns.*) removed. That's the signature of an org consolidating years of accumulated third-party integrations and moving mail filtering to Mimecast while formalizing on Akamai.

A quiet cluster of French domains all moved together

Three separate .fr domains — clesdelaudiovisuel.fr, danao.fr, and sessile.fr — all flipped from AS25540 to AS20529 within about 15 minutes of each other. Same source ASN, same destination ASN, same tight time window: that's the fingerprint of a hosting provider migrating a batch of customers off one network block onto another, rather than three unrelated owners coincidentally doing the same thing.

New arrivals on Cloudflare

Two domains landed on Cloudflare's network in this window:

  • mojafarma.online dropped its parking nameservers (ns1.lander.d.parity.domains) for coco.ns.cloudflare.com / ian.ns.cloudflare.com, moving off AS30058 and picking up a Brevo verification TXT record along the way — looks like a parked domain coming to life as a real site.
  • goldgood.shop left GoDaddy's nameservers (ns51/ns52.domaincontrol.com) for a mixed Cloudflare/Gcore setup (ns1.gcorelabs.net, ns2.gcdn.services), leaving AS174 for Cloudflare's AS13335 alongside AS199524.

A few smaller signals worth a glance

  • ghcr.io — yes, GitHub's Container Registry — swapped its NS1-managed nameservers for AWS Route 53 (ns-1349.awsdns-40.org and friends), a nameserver-provider switch on a piece of widely-depended-on infrastructure.
  • meseras.com moved its mail from IONOS (mx00/mx01.ionos.com) to Hostinger (mx2/mx1.hostinger.com), switched nameservers to Epik, and picked up a fresh Let's Encrypt CAA record — a fairly clean full-stack migration.
  • milantownship.org lost its long-standing Dundee.net setup (mail, nameservers, and an old MS/Google site-verification TXT) in favor of Network Solutions' dns1-5.name-services.com, moving from AS17378 to AS25773.

Nothing dramatic in the security-event pile beyond Flipkart's cleanup — mostly routine CAA additions and SPF tightening elsewhere. Same time tomorrow.