BlackBerry's good.com Packs Up, Newegg Locks Down

Out of 34,864 changes tracked across roughly 21.5 million domains in the last 24 hours, a few stood out enough to dig into.

Good.com and myblackberry.com move together

good.com, www.good.com, and www.myblackberry.com all flipped their network from AS18705 to AS16509 within seconds of each other. Same source ASN, same destination ASN, same moment — that's not a coincidence, it's a coordinated infrastructure migration. good.com is the old Good Technology domain BlackBerry picked up years ago, so seeing it move in lockstep with myblackberry.com suggests whoever manages BlackBerry's legacy web properties shifted a batch of them to new hosting at once.

Newegg Business tightens up

neweggbusiness.com switched networks from AS8075 to Akamai (AS16625) and picked up CDN hosting in the process. More interesting than the infrastructure move is the CAA record change: the old policy allowing amazon.com to issue certificates was removed, replaced with pki.goog (Google Trust Services). That's a deliberate narrowing of which certificate authorities are allowed to mint TLS certs for the domain — a small but meaningful security tightening alongside the CDN switch.

CAA locks going up elsewhere

A couple of smaller sites joined the cert-authority-restriction trend too. cobijocubano.org added a full slate of CAA records covering Comodo, Let's Encrypt, RapidSSL, and Sectigo (including wildcard rules), while eritap.com added a DigiCert-only CAA record alongside an NS migration from xironics.nl/xironics.com to resellerdns servers. Meanwhile deaf04.nl went the other way, removing its Let's Encrypt CAA restriction entirely — worth a look if you manage that zone and didn't expect it.

Cloudflare: one in, one out

navsarjanministry.org and its www variant moved onto Cloudflare, switching from AS31898 to Cloudflare's AS13335 and picking up CDN classification. At the same time, www.accountsupport.com did the reverse — dropping off Cloudflare (AS13335) and landing back on AS31898 with hosting reverting to unknown. Same ASN, opposite direction, same day: a reminder that "everyone's moving to Cloudflare" isn't universally true, even in a single day's data.

Also noted

correos.es, Spain's postal service, added four new underscore-prefixed TXT verification records under its existing Fastly CDN setup — likely new third-party service integrations rather than anything alarming. And ctp2nd.com was today's flappiest domain, racking up five separate changes in the window.