Getting started

Five steps, each one optional after the first. You can stop at "I looked something up" or go all the way to a monitored portfolio with signed history and alerts.

1. Look up any domain, no account

curl https://domaindrift.io/v1/domains/example.com

This is the keyless lane: one domain at a time, the latest observation, as a reduced preview. It shows the derived facts - who runs the nameservers, mail, and CDN; the certificate issuer and expiry; whether the site is reachable; when it was scanned - plus per-type record counts and a pointer to the signed receipt. It is rate limited to one request every 15 seconds per IP, and it is real: the same data the full product serves, reduced, current, and public.

Prefer a page to a terminal? The domain tools run the same class of lookups with a form: WHOIS, DNS, SSL, email auth, DNSSEC, propagation, expiry, blacklist.

2. Sign in for the complete record

An account opens the full product surface: the complete signed record for any domain (every DNS record value, the certificate chain details, registration data), every list view in full, and point-in-time history. Sign in from any page.

3. Mint your API key

From the API console, mint your own key and send it as a header on any read endpoint:

# either header works
curl -H "X-DomainDrift-Key: dd_..." https://domaindrift.io/v1/domains/example.com
curl -H "Authorization: Bearer dd_..." https://domaindrift.io/v1/domains/example.com

A keyed call returns the complete record and unlocks the list, history, changes, and stream endpoints. Every metered response carries its meter in the response headers, so you always know where you stand. Details: The API.

4. Put your domains under watch

Watching a domain is the monitoring product: the domain moves onto the watch lane, where DomainDrift re-checks its nameservers, mail, certificate, DNSSEC, and reachability as often as every 5 minutes, keeps the signed history, and alerts you within minutes of the reading that catches a material change. A DRM3 account puts one of your own domains under watch in a domain group; paid tiers raise the count. Set it up at Alerts; the walkthrough is in Monitoring & alerts.

5. Verify something

Pick any receipt id from an API response and resolve it, keyless:

curl https://domaindrift.io/receipts/RECEIPT_ID

Or paste a signed evidence bundle into the verifier and watch every signature check run in your own browser. What the checks mean, and what they deliberately do not claim: Verification.