Amazon Japan's Akamai Upgrade, and a Curious CAA Cluster

Out of roughly 32.5k changes seen across 14.2M tracked domains in the last 24 hours (plus 735k brand-new domains showing up for the first time), a few threads stood out from the noise.

Amazon Japan quietly joins the Akamai club

www.amazon.co.jp picked up a formal CDN classification today — its network now resolves through Akamai's ASNs (AS16509, AS16625, AS20940), and our hosting tag flipped from "unknown" to "Akamai (cdn)." Nothing dramatic happened here; this looks like our detection catching up to infrastructure that was likely already fronted by Akamai, now properly labeled.

Elsewhere, shopee.vn shifted its announcing network from AS138341 to AS131435 — the kind of quiet ASN reshuffle that often accompanies backend infrastructure changes at large platforms rather than a full migration.

A wave of CAA lockdowns to ssl.com

Several unrelated domains — opgis.com, analogsoft.com, agentvisit.com, fiftry.com, and gopiece.com — all added a CAA record limiting certificate issuance to ssl.com within the same window, several of them also flipping their hosting classification from "unknown" to "direct." CAA records are a nice, easy way to tell CAs "only this vendor may issue certs for me," and seeing several domains add the exact same one-CA policy in quick succession suggests a shared hosting platform or reseller rolling out a security baseline rather than five separate admins independently discovering CAA.

On the flip side, www.saheelqureshi.com did the opposite: it dropped a whole set of CAA entries (digicert.com, globalsign.com, letsencrypt.org, pki.goog, ssl.com) while also removing its shops.myshopify.com CNAME — a clean signature of a site leaving Shopify.

Domains going quiet

Not every change is a migration — some are domains simply shutting things down. www.fxconsult.net stripped its CAA record, MX record, and nameservers (ns1.myshoppa.net / ns2.myshoppa.net) all at once. pared.co lost its MX (mx.pared.co), its Dotster nameservers, and its SOA. alexadamsbooks.com had a nearly identical teardown — MX, ns1/ns2.domain.com, SPF record, all removed together. These look like domains being let go rather than migrated: mail, name service, and signing all disappearing in the same breath.

Small but telling

A handful of tiny moves are worth a mention for pattern-spotters: azsportscholarships.com left Cloudflare (AS209242) for AS15169/AS43515, swapped Papaki's Greek nameservers for SiteGround's, and consolidated its Google Workspace MX records down to the single modern smtp.google.com entry — a sign Google's newer unified mail-routing setup is spreading. Meanwhile iuven.com dropped its parking nameservers for registrar-servers.com and Fastly, adding an Afternic verification TXT — the classic fingerprint of a parked domain getting listed for sale.