November 1, 2026

A Parked Domain Wakes Up, and Other DNS Tales

Out of roughly 48,843 changes tracked across about 42 million domains in the last 24 hours, a handful of stories stand out — mostly domains either waking up, moving house, or quietly putting themselves on the market.

cemco.ca shakes off its parking page

cemco.ca and www.cemco.ca just went through a full makeover. The domain dropped its parked nameservers (apollo.dns-parking.com, athena.dns-parking.com) for GoDaddy's ns05/ns06.domaincontrol.com, swapped Hostinger mail (mx1/mx2.hostinger.com) for Google's smtp.google.com, added a google-site-verification TXT record, and landed behind Cloudflare (AS209242) instead of its previous AS47583 home. It also wiped a long list of CAA issuer rules in the process. That's the classic fingerprint of a domain going from "sitting idle" to "actually in use" — new registrant, real email, real hosting.

CDN musical chairs

A couple of hostname pairs swapped infrastructure providers outright:

  • hakobie.net and www.hakobie.net moved onto Akamai (AS20940), having previously sat on AS63949 — a textbook move onto a CDN for performance or DDoS protection.
  • nell.band jumped from BunnyCDN to CDN77, even though the underlying ASNs (AS60068, AS200325, AS212238) stayed the same — a reminder that "same network, different brand" migrations happen when providers share infrastructure.
  • Meanwhile livehd7.fit did the reverse, leaving Akamai's CDN (AS20940) for a bare AS63949 setup — hosting class going from "cdn" to "unknown."

A domain quietly lists itself for sale

menu.games added a TXT record reading afternic-verification-mN8ZV89Wxti7rXampaeMcw alongside its CAA update (now allowing both http-01 and dns-01 validation for Let's Encrypt and Google Trust Services). Afternic verification TXT records are a strong tell that a domain owner is listing the name for sale through GoDaddy's marketplace — worth knowing if you ever see one on a domain you're watching.

Parking exits leave traces

ffw-dachau.de and www.ffw-dachau.de dropped their parkingcrew.net nameservers and the CAA record limiting issuance to Let's Encrypt, along with an SPF record locked to an IPv6 block — all signs of a domain being reclaimed from a parking service and handed back to a real configuration.

Nothing here screams "mass incident" — just the normal churn of migrations, relistings, and domains coming back to life that passive DNS lets you watch in near real time.