Three domains, one parking pipeline, and a Shopify CAA mystery

Most of today's 32,574 changes are the usual background hum — SOA bumps, TXT churn, the odd nameserver swap. But a few threads are worth pulling on.

A parking pipeline picks up three domains

stone-mill.house, anelderlymeme.com, and www.auk.eco all landed on the same pair of networks — AS22612 and AS49981 — within the window. Two of them (stone-mill.house and www.auk.eco) picked up identical new nameservers, ns1.lander.d.parity.domains and ns2.lander.d.parity.domains, which is a strong signal these domains got scooped up by a parking/lander service after expiring or being dropped. Along the way, stone-mill.house shed its mail setup (MX to mail.stone-mill.house) and its SPF record, while www.auk.eco walked away from Shopify entirely — losing its shops.myshopify.com CNAME and, notably, all five of its CAA records (digicert.com, globalsign.com, letsencrypt.org, pki.goog, ssl.com). When a domain drops its CAA list on the way to a lander, it's basically telling the world "nobody's issuing real certs here anymore."

Same CAA wipe, different storefronts

Speaking of CAA — www.auk.eco, www.fbeauties.com, and www.laraactive.com all lost the exact same five-issuer CAA set today, and all three are (or were, in auk.eco's case) Shopify-hosted. Identical detail lists across unrelated storefronts usually means a platform-side change rather than three separate site owners independently editing DNS — worth watching if more Shopify domains show the same pattern tomorrow.

weba4.com's same-day round trip

weba4.com and www.weba4.com each flipped their setup in opposite directions within the window: the bare domain moved from AS202269 back to AS31549 and swapped its parked-looking sun.parspack.net/wood.parspack.net nameservers for self-hosted ns1.weba4.com/ns2.weba4.com, while the www host went the other way, from AS31549 to AS202269. That kind of criss-cross in the same 24 hours usually means a migration mid-flight rather than two clean moves — one to watch if it settles.

A quieter, cleaner migration: cbsinc.us

Not every change is chaos. cbsinc.us moved off Cloudflare (AS13335) to AS22612, added derek.ns.cloudflare.com/sky.ns.cloudflare.com nameservers, and picked up a fresh Outlook mail setup — MX to cbsinc-us.mail.protection.outlook.com plus an SPF record spanning websitewelcome.com and spf.protection.outlook.com. Looks like a straightforward small-business move to Microsoft 365 for email while hosting sits elsewhere.

Also flagged in the flapper list: shawnhillary.my racked up 5 changes and www.anlawfirm.ca / anlawfirm.ca each saw 3-4 — nothing dramatic in the details yet, but repeat offenders worth a glance if they keep it up.