Afternic in, Afternic out: a tale of two parked domains

Out of 36,151 changes across 25.3M tracked domains in the last day, a few tell little stories on their own — a domain waking up, another going up for sale, and a shop that simply stopped paying its bills.

One domain wakes up, another goes to sleep

nexclon.com (and its www host) just left Afternic's parking nameservers (ns1.afternic.com, ns2.afternic.com) for Cloudflare, picking up real Cloudflare nameservers (alexis.ns.cloudflare.com, monika.ns.cloudflare.com), a fresh batch of TXT verification records (including a saw-market= token), and a network move from AS16509 to Cloudflare's AS13335. That combination — dropping parking NS, adding CF nameservers and site-verification TXTs — is the classic fingerprint of a domain that just got sold or activated after sitting on the aftermarket.

Going the other direction: 3nia.com dropped its custom nameservers (ns1.domain.group, ns2.domain.group) for ns1.afternic.com/ns2.afternic.com, stripped out its CAA records entirely, and hopped from AS24940 to AS16509. That's a live site being pulled down and parked for sale — basically the mirror image of nexclon's story.

A quiet CDN swap

twigandthistle.com and ontru.com both moved their "hosting" label from BunnyCDN to CDN77 while sitting on the exact same ASN set (AS60068, AS200325, AS212238). Same network fingerprint, different provider name — worth a raised eyebrow if you're auditing vendor attribution rather than a full infrastructure migration.

When a Shopify store goes dark

www.zorivahones.shop moved off GoDaddy-style hosting (AS2635, ns65/ns66.domaincontrol.com) onto Shopify, complete with a fresh CAA policy for digicert.com, globalsign.com, letsencrypt.org, pki.goog, and ssl.com, and the standard shops.myshopify.com CNAME. Meanwhile www.yonexsanitary.com went the other way — dropped its Shopify CNAME, network AS13335, and hosting class entirely, landing on ns1.dns-expired.com / ns2.dns-expired.com with a TXT record that just says: "This domain is expired at Hostinger!" A blunt way to find out a shop closed up.

CAA housekeeping

A handful of domains tweaked their Certification Authority Authorization records today. aedifex.nl added a CAA entry explicitly allowing letsencrypt.org, tightening up who can issue certs for it. daemon.be added a CAA record for certainly.com — a less common CA choice worth noting. On the flip side, lordfilm-ante.ru and www.abg.ro both removed their letsencrypt.org CAA restrictions, which loosens (rather than tightens) issuance control — usually harmless, but the kind of change worth a second look if it's your own domain.