Domain Health Watch – SSL, Expiry, SPF/DMARC Alerts
Pricing
from $3.00 / 1,000 domain checkeds
Domain Health Watch – SSL, Expiry, SPF/DMARC Alerts
Weekly check of your own domains: days until domain and SSL expiry, broken SPF/DMARC/DKIM email authentication (the reason mail lands in spam), and DNS / name-server changes since the last run.
Pricing
from $3.00 / 1,000 domain checkeds
Rating
0.0
(0)
Developer
peti peti
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
3 days ago
Last modified
Categories
Share
The boring things that take a business offline or into the spam folder – checked every week, reported only when they need you.
For each of your domains:
| Check | Alert when |
|---|---|
| Domain registration expiry (official RDAP) | 🔴 ≤ 14 days or expired, 🟡 ≤ 30 days |
| HTTPS certificate | 🔴 untrusted, expired or ≤ 7 days left (auto-renewal broken?), 🟡 ≤ 21 days |
| SPF | 🔴 missing on a domain that receives mail, two SPF records, +all, more than 10 DNS lookups · 🟡 close to 10 lookups, no all |
| DMARC | 🔴 invalid (no p=) or duplicated · 🟡 missing · ⚪ p=none, no rua= reports |
| DKIM | Lists the selectors found (Google Workspace, Microsoft 365, SendGrid, SES … plus your own) · 🔴 when a selector that existed last run is gone |
| DNS changes since last run | 🟡 name servers changed (migration – or hijack) · 🔴 SPF / DMARC record disappeared · ⚪ MX, A, certificate issuer changed |
Why email authentication matters now
Gmail and Yahoo require SPF or DKIM from every sender and DMARC from bulk senders; mail that fails goes to spam or is rejected. These records usually break silently – a DNS migration, a new mail tool overwriting the SPF record, a second SPF record added by a plugin. This Actor remembers last week's records and flags the moment one disappears.
What it does not do
No website content is downloaded and no personal data is collected: only DNS queries, one TLS handshake per domain and one RDAP lookup at the registry listed by IANA. RDAP registrant contacts are never read out – only the expiry date, status and registrar name.
.jp and some other country domains have no public RDAP service, so their expiry date is reported as unknown (SSL and email checks still work).
Input
{ "domains": ["example.com", "example.co.uk"], "dkimSelectors": ["s1"] }
Then Schedules → Create schedule → weekly (or daily). Hook an integration on status = new-critical to get an email or Slack message only when something new broke.
Output (one row per domain)
{"domain": "example.com","status": "new-critical","summary": "Certificate on www.example.com expires in 5 day(s) – auto-renewal may be broken | DMARC changed: v=DMARC1; p=reject → (none)","issues": [{ "severity": "critical", "key": "ssl-expiry", "isNew": true, "message": "…" }],"daysToDomainExpiry": 290, "domainExpires": "2027-08-13T04:00:00Z", "registrar": "Example Registrar","daysToSslExpiry": 5, "sslIssuer": "Let's Encrypt","spf": "v=spf1 include:_spf.google.com ~all", "dmarc": null, "dmarcPolicy": null,"dkimSelectorsFound": ["google"], "mx": ["aspmx.l.google.com"], "ns": ["ns1.example.net"], "a": ["203.0.113.10"]}
status: ok, warnings, critical, or new-critical (a critical problem that was not there last run).
Pricing
Pay per event, platform usage included:
| Event | Price |
|---|---|
| Actor start | $0.01 per run |
domain-checked – one domain checked | $3.00 per 1,000 domains ($0.003 each) |
Example: 5 domains checked weekly ≈ 4 × ($0.01 + 5 × $0.003) = $0.10 per month.
日本語での説明
自分のドメインを毎週チェックし、ドメインや SSL 証明書の期限切れが近いこと、SPF・DMARC・DKIM(メールが迷惑メール扱いにならないための設定)が壊れていないか、DNS(ネームサーバー・MX など)が変わっていないかを知らせます。前回の結果を覚えているので、「先週まであった DMARC が消えた」のような事故を見つけられます。サイトの中身は読まず、個人情報も扱いません。.jp ドメインは公開の RDAP がないため、ドメインの期限は「不明」と表示します(SSL とメールのチェックはできます)。
料金: 1回 $0.01 + 1ドメイン $0.003。