September 1, 2026

Two domains land in the same parking lot today

Out of roughly 21,570 DNS changes tracked in the last 24 hours, a few stood out for showing the same fingerprint on unrelated domains — always a fun thing to spot.

Same parking lot, different tenants

lords.cfd and www.tldtrade.com both got the exact same treatment within minutes of each other: nameservers swapped to ns1.abovedomains.com / ns2.abovedomains.com, MX pointed at park-mx.above.com, and a fresh SPF record locking things down to -all. lords.cfd was previously sitting on Cloudflare (AS13335) and dropped straight to AS133618 — a classic signature of a domain expiring or being dropped into Above.com's parking/monetization network rather than an active migration.

verdict.io steps off Cloudflare

verdict.io moved off Cloudflare's network (AS13335) to AS16509, and its hosting classification flipped from "Cloudflare (cdn)" to plain "unknown." Alongside the network change, it picked up a full new set of CAA records covering DigiCert, Comodo, GlobalSign, Let's Encrypt, pki.goog, and ssl.com — so whoever's running it now is explicitly locking down which CAs can issue certs for the domain, even as it leaves Cloudflare's edge.

A pair of Hostinger parking domains lose their CAA records

www.agriada.com and www.notariusi.info both went through near-identical changes: their CNAMEs swapped from the bare domain to *.cdn.hstgr.net, their dns-parking.com nameservers (byte/pixel and apollo/athena respectively) were removed, Hostinger's MX and SPF records disappeared, and a long list of CAA entries (Comodo, DigiCert, GlobalSign, Let's Encrypt, pki.goog, Sectigo) got wiped out. Whatever these two domains are being used for now, they've clearly been pulled out of Hostinger's parking flow and reconfigured from scratch.

Quick hits

  • andaron.pl swapped off Microsoft 365 email (dropping the spf.protection.outlook.com include) for mail33.mydevil.net, moved its NS to nazwa.pl's trio of servers, and added CAA records limiting issuance to Certum and Let's Encrypt — a tidy little migration off Microsoft mail onto Polish hosting.
  • danworth-associates.com did the reverse: it picked up an Outlook MX record and the matching SPF include, moving from AS40034 to AS30447 — looks like a fresh onboarding onto Microsoft 365.
  • magentatv.gr moved onto Imperva's network (AS19551), flipping its hosting class from "unknown" to CDN — a sign someone just switched on Imperva's protection in front of the site.
  • algyapi.com lost its MX, nameservers, and SPF/CAA records in one pass — the kind of wholesale teardown you'd see when a domain is being abandoned or handed back.