shopify.com
SPF weakened (hard fail removed)
DomainDrift for security operations
Mail posture drifts quietly. The record should not.
A DMARC slide to p=none passes every checkbox audit while enforcing nothing. A registrar change nobody ordered is the first symptom of a domain changing hands. DomainDrift watches the control planes: email authentication, registration, registry status, and lands each material change as a signed, timestamped event with the value before and the value after.
Email authentication drift, last 24 hours
DMARC, SPF, DKIM and MTA-STS transitions observed on watched domains, each with its stored summary.
shopify.com
SPF strengthened (hard fail in place)
shopify.com
SPF weakened (hard fail removed)
shopify.com
SPF strengthened (hard fail in place)
shopify.com
SPF weakened (hard fail removed)
shopify.com
SPF strengthened (hard fail in place)
Registrar changes and registry holds, last 24 hours
Registrar moves, EPP holds, and re-registrations: the control-of-the-name events.
No registrar changes or registry holds in the last 24 hours. The full wire is at the daily change feed.
Three steps in
1 · Try it, no account
curl https://domaindrift.io/connor/v1/domains/example.comOne keyless request every 15 seconds per IP, for any domain in the catalog. It returns a reduced preview record with a receipt pointer you can resolve right away.
2 · Free account
Opens the complete signed record and every list in full, puts one of your own domains under watch, and adds signed webhook alerts. 60 API requests a day, refreshed at midnight UTC.
Start free →3 · When you outgrow free
Pro puts your estate and your watchlist under the same signed watch, with webhook alerts your SOC can route.
Prices load live from the offer catalog; a tier that is not on sale yet says so. Full pricing →