DomainDrift 0.80: run the checks yourself, from your own browser

DomainDrift watches 100,000+ domains and records what their infrastructure is doing: DNS, certificates, mail posture, registration, reachability. Every observation is signed the moment it is made, and when a field moves, the change is the event: what it was, what it became, and when we saw it.

The July wave, versions 0.70 through 0.80, adds the feature the whole product points at: you can now run the checks yourself.

Run the checks yourself

Every domain page carries a probe panel. One click asks your browser, not our servers, to resolve the domain over encrypted DNS, pull its public registration record, and time a reachability check over HTTPS. Each answer lands beside what our last signed scan saw, with a plain badge: matches our signed scan, or moved since our scan.

The second badge is the point. When your resolver returns records that differ from the ones we signed, you are watching drift as it happens, from your own network, on your own screen. And when a check cannot run in your browser, the panel hands you a copyable command to run the same lookup from a terminal.

The reachability check is labeled as exactly what it measures: DNS, TLS, and time to first byte, from your network. It is not a ping, and it is not our measurement.

A domain page that reads like a map

The page around the panel grew depth. An infrastructure map draws the domain's skeleton: the DNS, mail, and certificate lanes, the hosts behind each one, and who operates them. A visit-site link opens the real site over HTTPS, and when our last signed scan got no response there, an amber badge says so before you click. One button verifies every receipt on the page in your browser, and one download hands you the evidence bundle to keep.

Search that answers as you type

Type a domain, an IP, a company, a registrar, or a certificate authority, and results appear as you type, drawn from 100,000+ tracked domains. Search only returns what DomainDrift has observed and signed.

Groups, and alerts that follow them

Domain groups gather the names you actually care about: your portfolio, your vendors, your competitors. One alert subscription now covers a whole group, so a nameserver move or a certificate change anywhere inside it reaches you without wiring each domain by hand. Every group gets a live view of what is steady and what moved.

Signed, and checkable

Every scan writes one Ed25519 receipt per observation plane, and the public verifier runs entirely in your browser: once the page loads, it works offline. The signing keys are published in a key registry that carries lifecycle status. A current key verifies, a rotated key verifies for receipts inside its validity window, and a revoked key fails even when the signature math passes.

The record arrives signed, and the same page hands you the tools to read the internet for yourself: run the probes, compare the answers, and keep the evidence.

Start free

All of it sits in a redesigned live dashboard: the front page shows what moved across the catalog in the last day, what is not answering, and what is steady, and every number is a door to the page behind it.

Sign in free to open full domain pages, watch five domains of your own, keep one group, and use the API within a free allowance. Start at domaindrift.io: search a name you know, open its page, and run the checks yourself.