Every change to a domain, on the record

The internet changes quietly. A company moves its mail to a new provider. A domain's name servers switch. A certificate appears overnight on a lookalike of your brand. None of it announces itself, and by the time it matters, the state it was in before is gone.

DomainDrift reads the shape of a domain on a schedule, its addresses, where its mail is handled, its name servers, its hosting, its certificate and its registrar, and puts every change on the record. The film runs the whole line in three minutes.

Drift is a change you did not make

The first clean scan of a domain is its baseline, its normal, and normal includes nothing: a parked domain with no mail and no site still gets a signed reading that says so. A change from that baseline is drift, a new mail host, a moved name server, a different hosting network, a certificate that was not there yesterday. Because the parked state was signed, the day it turns on is a change we can prove, with a time.

Signed, and anchored to Base

Every scan cycle is signed with an Ed25519 key. Every fifteen minutes, the readings in that window roll into one Merkle root written to a public contract on Base. The block's own clock then says the reading existed by that time, and nobody, including us, can move it earlier. The leaf sets are public, so anyone can rebuild the root and check it against the chain, in their browser, at domaindrift.io/verify.

A signature proves who took a reading and that it has not changed since. The anchor proves when. Neither says the reading is correct, and the record says so. Certificate Transparency already keeps a signed, public, timestamped log of one thing, TLS certificates, recorded by the authorities that issue them. DomainDrift watches the whole surface as an outside observer, and anchors what it sees.

Monitor your estate

Point DomainDrift at the domains you care about, your own, your vendors', or the lookalikes of your brand, and it watches them around the clock. When one drifts, you get the alert: what changed, the before and the after, and a receipt. By email, or straight to your systems by webhook. Pull a domain's whole history as one signed bundle for a dispute, a filing, or a takedown.

Monitoring has three rungs. Free watches one domain with one alert. Solo, $29 a month, watches five on the priority lane with a daily report, webhooks, and export. Scale, $299, watches two thousand. The daily report reads like a newsletter and opens with an at-a-glance summary; samples are at domaindrift.io/reports. Prices move, so the live ladder is the pricing page, never a number quoted here.

A leads list from what changed

The same signal reads the other way. A company that just moved its mail, its DNS, its hosting or its certificate authority is a company in motion, mid-migration or standing something new up. A static list tells you what a company runs; this one tells you it is changing, and when. Each row is a domain, a dated change, and a receipt, so it drops straight into Apollo, HubSpot, or Salesforce.

Leads has two paid rungs. Starter, $99 a month, is three segments, refreshed weekly, five hundred rows, CSV and web. Team, $299, is every segment, refreshed daily, five thousand rows, CSV and API. As with monitoring, the live prices are on the pricing page.

One catalog, under continuous scan, signed and anchored. Watch your domains, or read the internet's changes as a list. Start at domaindrift.io.