Flipkart tightens its Akamai front door, plus a parking carousel

Nearly 9,300 DNS changes rolled through in the last 24 hours, and the standout is a household e-commerce name quietly hardening its edge setup.

Flipkart locks down certificate issuance

www.flipkart.com picked up brand-new CAA records (issue digicert.com, issue globalsign.com, issue letsencrypt.org, issuewild globalsign.com) while its CNAME flipped from flipkart.com straight to www.flipkart.com.edgekey.net — the telltale sign of Akamai's edge CDN. The hosting classification for the hostname moved from "unknown" to Akamai (cdn). Adding CAA records like this is a good defensive move: it explicitly limits which CAs are allowed to issue certs for the domain, cutting down the blast radius if some other CA gets compromised or misused.

The parking-lot shuffle

A handful of domains spent the day bouncing between parking services and "real" hosting:

• ulkersofuoglu.com and its www left Cloudflare (AS13335) for AS22612, swapping in launch1.spaceship.net / launch2.spaceship.net nameservers, a fresh SPF record for spf.shared.spaceship.host, and new MX records pointing at mx1.promail.com.tr / mx2.promail.com.tr — looks like a full migration off Cloudflare onto Spaceship's DNS and mail stack.
• drooda.com moved the opposite direction into parking, dropping its registrar nameservers (dns1/dns2.registrar-servers.com) for ns1.lander.d.parity.domains / ns2.lander.d.parity.domains, alongside a network hop from AS47583 to AS30058.
• iqexperts.com went from Spaceship's nameservers to Afternic's (ns3.afternic.com, ns4.afternic.com), tightened its SPF to v=spf1 -all, and cleared its old verification TXT — a domain-for-sale pattern if there ever was one.
• snuae.com made a similar jump, leaving Afternic's parking nameservers for Name.com's (ns1cmt, ns2lns, ns3jkl, ns4fmx.name.com) and dropping its v=spf1 -all record along with an MX record.

Security config odds and ends

CAA activity was the theme among today's security-relevant events. akfaryarsiptk.ac.id removed its Let's Encrypt / Google Trust Services CAA restrictions and dropped its Hostinger SPF include — worth a second look if that domain still expects mail to land. On the flip side, nimblepet.com and enteward.com both added fresh CAA policies (Buypass, HARICA, Let's Encrypt, Google, Sectigo) while switching to ns1.domain.group / ns2.domain.group nameservers, suggesting a coordinated onboarding to a new registrar/host bundle.

Infrastructure housekeeping

fsu.edu swapped its old dns1/dns2/dnsa1.fsu.edu nameservers for aws-bcns-east1.fsu.edu, nwr-bcns-external.fsu.edu, and rsb-bcns-external.fsu.edu — a sign of DNS infrastructure being rebuilt around AWS-backed regional nodes. Meanwhile paybetter.co.th left a "hostingberry" setup for Route 53 (ns-1421.awsdns-49.org and friends) and trimmed its SPF record down to just include:_spf.google.com -all, dropping a stale IPv4 entry in the process.