Domain Expiry Sentinel
Pricing
from $0.30 / domain expiry report generated
Domain Expiry Sentinel
Reports public RDAP, TLS certificate, MTA-STS, DMARC RUA, and security.txt deadline signals for bare domains.
Pricing
from $0.30 / domain expiry report generated
Rating
0.0
(0)
Developer
Checksmith Cats
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
5 days ago
Last modified
Categories
Share
Domain Expiry Sentinel reports compact expiry and machine-readable deadline signals for domains you own, manage, or have permission to check.
It checks:
- RDAP expiration events exposed by public domain records
- TLS certificate
notAfterdates on port 443 - MTA-STS TXT presence and policy
max_age - DMARC
ruareporting-address presence /.well-known/security.txtExpiresvalues
Each domain is reported as a set of observed public signals. Signals are marked ok, warn, or unknown; unknown means the signal was missing, unreachable, blocked by scanner safety rules, or not machine-readable from the public surface.
Outputs
- Dataset rows: one row per checked signal
REPORT.json: full structured report and evidence packREPORT.html: readable reportREPORT.md: Markdown report
Billing
Pay-per-event billing is based only on domains where at least one public signal was observable. Invalid input is not charged.
Boundary
This Actor does not renew domains, change DNS, monitor uptime, assess security-team quality, audit registrar accounts, or certify that a domain or policy is safe. It records scanner-visible public signals at the time of the run.
References
- RDAP: RFC 9082 / RFC 9083
- MTA-STS: RFC 8461
- DMARC: RFC 7489
- security.txt: RFC 9116
Related tools
- Policy Page Drift Pack - Use when domain deadline signals should be paired with policy-page drift.
- Agency Evidence Pack - Use when expiry signals are part of a multi-client monthly record.
- Security Headers Bulk QA - Use when the same domains also need public response-header checks.
