# DomainDrift - Internet Telemetry Index
# https://domaindrift.io

DomainDrift continuously scans ~50,000 domains, collecting DNS records, TLS certificates, WHOIS data, HTTP probes, and more. Every observation is Ed25519-signed with provenance receipts.

## Try it with no key

GET /connor/v1/domains/:domain - a PREVIEW of the latest signed snapshot for ONE domain, no API
key required.

    curl https://domaindrift.io/connor/v1/domains/example.com

The keyless response is a real, current preview, not the full record. It carries the derived
facts: who runs the nameservers, mail and CDN; the certificate issuer and expiry date; whether
the site is reachable; when it was scanned; the snapshot id; and per-type RECORD COUNTS. It also
carries a pointer to the Ed25519 receipt (id + the full record's output_hash + a public
/receipts/:id URL you can resolve with no key) so you can see the signed commitment exists.

The preview is NOT signed, deliberately: a signature commits to the exact bytes of the FULL
record, so one attached to a reduced subset could never verify. Withheld keyless: the DNS record
VALUES (A/AAAA/MX/NS/TXT/CNAME/SOA/CAA/SRV), certificates, subdomains, WHOIS, probe headers,
history, the provenance chain, and every bulk surface.

Limits: 1 request per 15 seconds per IP, under a shared global daily ceiling. Every response
carries X-RateLimit-Limit / X-RateLimit-Remaining / X-RateLimit-Reset.

An API key is free and returns the COMPLETE signed record on the same URL, and the receipt above
verifies against it. Lists, history, bulk, and exports require a key.

## API (X-DomainDrift-Key header)

GET /health - Service health (public, no auth)
GET /connor/v1/domains - Paginated domain list
GET /connor/v1/domains/:domain - Latest signal snapshot (keyless: a reduced preview; keyed: full)
GET /connor/v1/domains/:domain/history - Time-series snapshots
GET /connor/v1/domains/:domain/provenance - Receipt chain
GET /connor/v1/changes - Global change feed
GET /connor/v1/stream - SSE event stream

## Access

Docs + the free/metered board: https://domaindrift.io/api
Sign in with your DRM3 account at https://drm3.network/account (DomainDrift is enabled from the app catalog). Programmatic access uses an X-DomainDrift-Key (dd_) API key.

## Related

- Status: https://status.drm3.network
- Products: https://status.drm3.network/products.json
- Signing keys: https://domaindrift.io/.well-known/connor-keys.json

DRM3 is a data infrastructure company. https://drm3.io