shopify.com
SPF weakened (hard fail removed)
DomainDrift for security operations
Mail posture drifts quietly. The record should not.
A DMARC slide to p=none passes every checkbox audit while enforcing nothing. A registrar change nobody ordered is the first symptom of a domain changing hands. DomainDrift watches the control planes: email authentication, registration, registry status, and lands each material change as a signed, timestamped event with the value before and the value after.
Email authentication drift, last 24 hours
DMARC, SPF, DKIM and MTA-STS transitions observed on watched domains, each with its stored summary.
Three steps in
1 · Try it, no account
curl https://domaindrift.io/v1/domains/example.comOne keyless request every 15 seconds per IP, for any domain in the catalog. It returns a reduced preview record with a receipt pointer you can resolve right away.
2 · Free account
Opens the complete signed record and every list in full, puts one of your own domains under watch, and adds signed webhook alerts. 60 API requests a day, refreshed at midnight UTC.
Start free →3 · When you outgrow free
Pro puts your estate and your watchlist under the same signed watch, with webhook alerts your SOC can route.
Prices load live from the offer catalog; a tier that is not on sale yet says so. Full pricing →