How the web is hosted, served and secured
Hosting networks, DNS and email providers, certificate authorities and email-security records across 31.94 million domains that answered our DNS sweep of Sep 2026, out of 44.1 million tracked.
Hosting networks
The network that announces the domain's primary IPv4 address. CDNs and reverse proxies such as Cloudflare front the origin, so the origin host is hidden behind them. Shares are of 28.58 million domains with an A record.
| # | Provider | Share | Domains |
|---|---|---|---|
| 1 | Cloudflare | 24.65% | 7.04M |
| 2 | Amazon Web Services | 10.30% | 2.94M |
| 3 | Hostinger | 4.20% | 1.2M |
| 4 | Wix | 3.57% | 1.02M |
| 5 | OVHcloud | 2.43% | 695K |
| 6 | Hetzner | 2.25% | 644K |
| 7 | Squarespace | 2.07% | 592K |
| 8 | IONOS | 1.87% | 534K |
| 9 | Google Cloud | 1.70% | 486K |
| 10 | 1.38% | 393K | |
| 11 | Oracle Cloud | 1.32% | 376K |
| 12 | Xserver | 1.20% | 342K |
| 13 | DigitalOcean | 1.07% | 307K |
| 14 | GoDaddy | 0.98% | 281K |
| 15 | Namecheap | 0.93% | 266K |
| 16 | Linode (Akamai) | 0.82% | 233K |
| 17 | Aruba | 0.79% | 226K |
| 18 | Sakura Internet | 0.78% | 223K |
| 19 | GMO Internet | 0.77% | 221K |
| 20 | Microsoft | 0.68% | 194K |
| 21 | Automattic (WordPress.com) | 0.66% | 189K |
| 22 | DDoS-Guard | 0.64% | 182K |
| 23 | Fastly | 0.63% | 179K |
| 24 | Combell | 0.51% | 146K |
| 25 | Beget | 0.51% | 145K |
Email providers
Classified from the primary MX host. "Other" covers hosts our provider map does not name yet. Shares are of 16.88 million domains that publish MX records.
| # | Provider | Share | Domains |
|---|---|---|---|
| 1 | Google Workspace | 16.39% | 2.77M |
| 2 | Microsoft 365 | 12.59% | 2.13M |
| 3 | Hostinger | 3.13% | 528K |
| 4 | IONOS | 2.12% | 358K |
| 5 | OVHcloud | 1.66% | 281K |
| 6 | Zoho Mail | 1.59% | 268K |
| 7 | GoDaddy Email | 1.43% | 242K |
| 8 | Namecheap | 1.38% | 232K |
| 9 | SiteGround Email | 1.16% | 195K |
| 10 | Yandex 360 | 1.04% | 176K |
| 11 | Cloudflare Email Routing | 1.02% | 173K |
| 12 | OpenSRS Email | 0.92% | 155K |
| 13 | Proofpoint Essentials | 0.90% | 152K |
| 14 | STRATO | 0.80% | 135K |
| 15 | Beget | 0.67% | 113K |
| 16 | ALL-INKL | 0.62% | 105K |
| 17 | Above.com | 0.61% | 103K |
| 18 | Titan Email | 0.58% | 97,694 |
| 19 | Lolipop | 0.56% | 94,024 |
| 20 | 20i | 0.46% | 77,077 |
| 21 | one.com | 0.45% | 75,570 |
| 22 | Mail.ru | 0.40% | 66,728 |
| 23 | Locaweb | 0.36% | 61,166 |
| 24 | Timeweb | 0.33% | 56,456 |
| 25 | Rackspace Email | 0.32% | 54,072 |
| 26 | Other providers | 42.64% | 7.2M |
DNS providers
Classified from the authoritative name servers. Shares are of 23.15 million domains that returned NS records.
| # | Provider | Share | Domains |
|---|---|---|---|
| 1 | Cloudflare DNS | 20.62% | 4.77M |
| 2 | GoDaddy DNS | 9.55% | 2.21M |
| 3 | Hostinger | 3.81% | 882K |
| 4 | Wix DNS | 3.24% | 749K |
| 5 | Amazon Route 53 | 2.38% | 551K |
| 6 | Google Cloud DNS | 2.14% | 495K |
| 7 | IONOS | 1.80% | 417K |
| 8 | Namecheap | 1.47% | 341K |
| 9 | OVHcloud | 1.40% | 324K |
| 10 | SiteGround Email | 1.13% | 263K |
| 11 | IBM NS1 | 1.08% | 249K |
| 12 | Xserver | 0.98% | 227K |
| 13 | REG.RU | 0.81% | 188K |
| 14 | Aruba | 0.80% | 186K |
| 15 | HostGator | 0.71% | 164K |
| 16 | STRATO | 0.65% | 150K |
| 17 | Afternic | 0.58% | 134K |
| 18 | Sakura Internet | 0.56% | 129K |
| 19 | Bluehost | 0.55% | 128K |
| 20 | Beget | 0.54% | 125K |
| 21 | WordPress.com DNS | 0.53% | 124K |
| 22 | Alibaba Cloud DNS | 0.52% | 121K |
| 23 | Registro.br | 0.51% | 119K |
| 24 | ALL-INKL | 0.50% | 115K |
| 25 | Namecheap Hosting | 0.48% | 112K |
| 26 | Other providers | 32.96% | 7.63M |
Certificate authorities
The issuer of the leaf certificate seen on the https robots.txt fetch, domain-weighted (one domain, one vote). Shares are of 24.37 million domains that completed a TLS handshake.
| # | Provider | Share | Domains |
|---|---|---|---|
| 1 | Let's Encrypt | 63.46% | 15.47M |
| 2 | Google Trust Services | 23.36% | 5.69M |
| 3 | Sectigo | 3.57% | 871K |
| 4 | GoDaddy | 3.04% | 742K |
| 5 | Amazon Trust Services | 2.05% | 500K |
| 6 | DigiCert | 1.55% | 378K |
| 7 | GlobalSign | 0.88% | 215K |
| 8 | ZeroSSL | 0.63% | 154K |
| 9 | JPRS | 0.16% | 38,838 |
| 10 | SSL.com | 0.15% | 36,572 |
| 11 | Certum | 0.13% | 32,848 |
| 12 | home.pl | 0.13% | 31,175 |
| 13 | GoGetSSL | 0.07% | 17,280 |
| 14 | Certainly | 0.07% | 16,668 |
| 15 | TrustAsia | 0.06% | 13,640 |
| 16 | Gandi | 0.06% | 13,464 |
| 17 | nazwa.pl | 0.05% | 11,200 |
| 18 | Shoper | 0.04% | 9,527 |
| 19 | cyber_Folks | 0.04% | 8,630 |
| 20 | Network Solutions | 0.03% | 8,037 |
| 21 | HARICA | 0.03% | 7,603 |
| 22 | Actalis | 0.03% | 6,768 |
| 23 | Cybertrust Japan | 0.03% | 6,352 |
| 24 | Entrust | 0.02% | 4,180 |
| 25 | WoTrus | 0.01% | 3,341 |
| 26 | Other providers | 0.29% | 71,612 |
Email security and modern DNS by site popularity
Segments are Chrome UX Report popularity tiers. SPF and DMARC shares are of each tier's domains that publish MX records; IPv6 is of domains with an A record; DNSSEC is of resolved domains.
| Popularity | With MX | SPF | DMARC | DMARC reject | IPv6 | DNSSEC |
|---|---|---|---|---|---|---|
| Top 1K | 391 | 91.56% | 76.73% | 33.25% | 37.33% | 8.66% |
| Top 10K | 3,285 | 93.12% | 80.85% | 29.83% | 33.10% | 7.94% |
| Top 100K | 30,033 | 92.00% | 77.26% | 22.73% | 33.55% | 6.77% |
| Top 1M | 309K | 91.66% | 71.08% | 13.08% | 28.71% | 6.05% |
| Top 10M | 3.63M | 89.17% | 57.73% | 6.98% | 21.58% | 7.07% |
Top-level domains
The registrable suffix of each resolved domain (com, de, co.uk). Shares are of 31.94 million resolved domains.
| # | Suffix | Share | Domains |
|---|---|---|---|
| 1 | .com | 43.69% | 13.96M |
| 2 | .de | 3.75% | 1.2M |
| 3 | .org | 3.63% | 1.16M |
| 4 | .com.br | 3.02% | 966K |
| 5 | .ru | 2.99% | 957K |
| 6 | .net | 2.41% | 770K |
| 7 | .co.uk | 2.01% | 643K |
| 8 | .it | 1.79% | 573K |
| 9 | .fr | 1.77% | 566K |
| 10 | .nl | 1.59% | 508K |
| 11 | .pl | 1.31% | 419K |
| 12 | .in | 1.09% | 348K |
| 13 | .com.au | 1.05% | 334K |
| 14 | .jp | 1.03% | 329K |
| 15 | .ca | 0.87% | 279K |
| 16 | .cz | 0.81% | 259K |
| 17 | .es | 0.81% | 258K |
| 18 | .shop | 0.67% | 214K |
| 19 | .be | 0.62% | 197K |
| 20 | .ch | 0.62% | 197K |
| 21 | .info | 0.62% | 197K |
| 22 | .xyz | 0.59% | 188K |
| 23 | .eu | 0.58% | 186K |
| 24 | .co | 0.53% | 171K |
| 25 | .hu | 0.52% | 165K |
| 26 | .co.jp | 0.50% | 159K |
| 27 | .online | 0.50% | 158K |
| 28 | .at | 0.49% | 156K |
| 29 | .ro | 0.48% | 155K |
| 30 | .se | 0.47% | 150K |
Registry zones
Whole-registry counts from the zone files ICANN's Centralized Zone Data Service publishes to approved parties: every delegated name in the zone, not just the sites we track. DNSSEC here means the registry holds a DS record for the name. Shares are of each zone's own registered names.
| Zone | Registered names | DNSSEC signed | Leading DNS provider | Snapshot |
|---|---|---|---|---|
| .org | 12.15M | 5.78% | GoDaddy DNS 23.36% | Sep 2026 |
| .xyz | 10.28M | 1.61% | Afternic 53.47% | Sep 2026 |
| .info | 5.19M | 4.66% | Cloudflare DNS 20.09% | Sep 2026 |
| .shop | 4.35M | 11.53% | Cloudflare DNS 27.05% | Sep 2026 |
| .online | 3.55M | 3.81% | Cloudflare DNS 15.99% | Sep 2026 |
| .store | 2.08M | 2.97% | GoDaddy DNS 17.50% | Sep 2026 |
| .site | 1.92M | 2.02% | Cloudflare DNS 35.47% | Sep 2026 |
| .app | 1.66M | 7.12% | Cloudflare DNS 32.52% | Sep 2026 |
| .pro | 1.14M | 4.70% | Cloudflare DNS 43.40% | Sep 2026 |
| .dev | 765K | 14.01% | Cloudflare DNS 38.21% | Sep 2026 |
Verified services
Domain-verification tokens in apex TXT records prove a relationship between the site owner and a vendor. Only recognised vendors are counted; the tokens themselves are never shown. Shares are of 31.94 million resolved domains.
| # | Vendor | Share | Domains |
|---|---|---|---|
| 1 | 17.07% | 5.45M | |
| 2 | Microsoft 365 | 5.27% | 1.68M |
| 3 | Meta Business | 1.48% | 473K |
| 4 | Brevo | 1.33% | 426K |
| 5 | Apple Business | 0.77% | 245K |
| 6 | Zoho | 0.62% | 199K |
| 7 | GlobalSign | 0.62% | 198K |
| 8 | Klaviyo | 0.50% | 161K |
| 9 | Yandex Webmaster | 0.39% | 125K |
| 10 | Atlassian | 0.29% | 93,504 |
| 11 | OpenAI | 0.22% | 70,853 |
| 12 | 0.20% | 65,388 | |
| 13 | MailerLite | 0.20% | 62,881 |
| 14 | Mail.ru | 0.14% | 45,480 |
| 15 | KnowBe4 | 0.13% | 43,125 |
| 16 | Adobe | 0.10% | 33,191 |
| 17 | Stripe | 0.10% | 33,025 |
| 18 | Sophos | 0.09% | 29,847 |
| 19 | 0.09% | 28,322 | |
| 20 | Proton | 0.09% | 27,855 |
| 21 | Amazon SES | 0.09% | 27,240 |
| 22 | DocuSign | 0.08% | 26,684 |
| 23 | Canva | 0.08% | 24,113 |
| 24 | Firebase | 0.07% | 22,084 |
| 25 | Cisco | 0.06% | 19,437 |
| 26 | Yahoo | 0.05% | 15,586 |
| 27 | Replit | 0.05% | 15,225 |
| 28 | Have I Been Pwned | 0.05% | 15,021 |
| 29 | Cisco Duo | 0.05% | 14,688 |
| 30 | 1Password | 0.04% | 13,766 |
| 31 | Slack | 0.04% | 13,563 |
| 32 | Trend Micro Email Security | 0.04% | 12,673 |
| 33 | Miro | 0.04% | 12,122 |
| 34 | Forward Email | 0.04% | 12,015 |
| 35 | TikTok | 0.03% | 10,498 |
| 36 | Twilio | 0.03% | 9,994 |
| 37 | Microsoft Dynamics 365 | 0.03% | 9,820 |
| 38 | Smartsheet | 0.03% | 9,735 |
| 39 | Autodesk | 0.03% | 9,049 |
| 40 | Box | 0.02% | 7,938 |
Method: one DNS sweep of every tracked domain per month (A, AAAA, MX, NS, TXT, CAA, DS and the DMARC record), IP networks from the RouteViews-derived iptoasn.com data (CC BY 4.0), certificates from the https robots.txt fetch. A domain that returned no record of a type counts as not having it in that sweep. Details on the methodology page.