CONTINUOUS INTERNET TELEMETRY24H DRIFT10,798 material changesacross 10,378 domains · +169 vs yesterdayDNS DRIFT757 domains changed DNS providertop destination parity.domains · -23 vs yesterdayEMAIL DRIFT189 domains switched email providertop destination outlook.com · +19 vs yesterdayCERT DRIFT214 domains switched issuing CA24h · -16 vs yesterdayNOW983 curated domains not reachable-366 vs yesterdaySITE ERRORS18,636 sites serving errorslast probe · 5xx / 404 / TLSTHROTTLED95,181 throttled or blocked our scanner429 rate-limit / 403 bot-block
Docs / Getting started

Getting started

Five steps, each one optional after the first. You can stop at "I looked something up" or go all the way to a monitored portfolio with signed history and alerts.

1. Look up any domain, no account

curl https://domaindrift.io/v1/domains/example.com

This is the keyless lane: one domain at a time, the latest observation, as a reduced preview. It shows the derived facts - who runs the nameservers, mail, and CDN; the certificate issuer and expiry; whether the site is reachable; when it was scanned - plus per-type record counts and a pointer to the signed receipt. It is rate limited to one request every 15 seconds per IP, and it is real: the same data the full product serves, reduced, current, and free.

Prefer a page to a terminal? The free tools run the same class of lookups with a form: WHOIS, DNS, SSL, email auth, DNSSEC, propagation, expiry, blacklist.

2. Sign in free for the complete record

A free account opens the full product surface: the complete signed record for any domain (every DNS record value, the certificate chain details, registration data), every list view in full, and point-in-time history. Sign in from any page; no card is asked for.

3. Mint your API key

From the API console, mint your own key and send it as a header on any read endpoint:

# either header works
curl -H "X-DomainDrift-Key: dd_..." https://domaindrift.io/v1/domains/example.com
curl -H "Authorization: Bearer dd_..." https://domaindrift.io/v1/domains/example.com

A keyed call returns the complete record and unlocks the list, history, changes, and stream endpoints. Every metered response carries its meter in the response headers, so you always know where you stand. Details: The API.

4. Put your domains under watch

Watching a domain is the monitoring product: DomainDrift re-checks its nameservers, mail, certificate, DNSSEC, and reachability every 5 minutes, keeps the signed history, and alerts you the moment something material changes. A free account puts one of your own domains under watch in a domain group; paid tiers raise the count. Set it up at Alerts; the walkthrough is in Monitoring & alerts.

5. Verify something

Pick any receipt id from an API response and resolve it, keyless:

curl https://domaindrift.io/receipts/RECEIPT_ID

Or paste a signed evidence bundle into the verifier and watch every signature check run in your own browser. What the checks mean, and what they deliberately do not claim: Verification.

← OverviewThe signed record →