Domain Health Watch – SSL, Expiry, SPF/DMARC Alerts avatar

Domain Health Watch – SSL, Expiry, SPF/DMARC Alerts

Pricing

from $3.00 / 1,000 domain checkeds

Go to Apify Store
Domain Health Watch – SSL, Expiry, SPF/DMARC Alerts

Domain Health Watch – SSL, Expiry, SPF/DMARC Alerts

Weekly check of your own domains: days until domain and SSL expiry, broken SPF/DMARC/DKIM email authentication (the reason mail lands in spam), and DNS / name-server changes since the last run.

Pricing

from $3.00 / 1,000 domain checkeds

Rating

0.0

(0)

Developer

peti peti

peti peti

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

3 days ago

Last modified

Categories

Share

The boring things that take a business offline or into the spam folder – checked every week, reported only when they need you.

For each of your domains:

CheckAlert when
Domain registration expiry (official RDAP)🔴 ≤ 14 days or expired, 🟡 ≤ 30 days
HTTPS certificate🔴 untrusted, expired or ≤ 7 days left (auto-renewal broken?), 🟡 ≤ 21 days
SPF🔴 missing on a domain that receives mail, two SPF records, +all, more than 10 DNS lookups · 🟡 close to 10 lookups, no all
DMARC🔴 invalid (no p=) or duplicated · 🟡 missing · ⚪ p=none, no rua= reports
DKIMLists the selectors found (Google Workspace, Microsoft 365, SendGrid, SES … plus your own) · 🔴 when a selector that existed last run is gone
DNS changes since last run🟡 name servers changed (migration – or hijack) · 🔴 SPF / DMARC record disappeared · ⚪ MX, A, certificate issuer changed

Why email authentication matters now

Gmail and Yahoo require SPF or DKIM from every sender and DMARC from bulk senders; mail that fails goes to spam or is rejected. These records usually break silently – a DNS migration, a new mail tool overwriting the SPF record, a second SPF record added by a plugin. This Actor remembers last week's records and flags the moment one disappears.

What it does not do

No website content is downloaded and no personal data is collected: only DNS queries, one TLS handshake per domain and one RDAP lookup at the registry listed by IANA. RDAP registrant contacts are never read out – only the expiry date, status and registrar name.

.jp and some other country domains have no public RDAP service, so their expiry date is reported as unknown (SSL and email checks still work).

Input

{ "domains": ["example.com", "example.co.uk"], "dkimSelectors": ["s1"] }

Then Schedules → Create schedule → weekly (or daily). Hook an integration on status = new-critical to get an email or Slack message only when something new broke.

Output (one row per domain)

{
"domain": "example.com",
"status": "new-critical",
"summary": "Certificate on www.example.com expires in 5 day(s) – auto-renewal may be broken | DMARC changed: v=DMARC1; p=reject → (none)",
"issues": [{ "severity": "critical", "key": "ssl-expiry", "isNew": true, "message": "…" }],
"daysToDomainExpiry": 290, "domainExpires": "2027-08-13T04:00:00Z", "registrar": "Example Registrar",
"daysToSslExpiry": 5, "sslIssuer": "Let's Encrypt",
"spf": "v=spf1 include:_spf.google.com ~all", "dmarc": null, "dmarcPolicy": null,
"dkimSelectorsFound": ["google"], "mx": ["aspmx.l.google.com"], "ns": ["ns1.example.net"], "a": ["203.0.113.10"]
}

status: ok, warnings, critical, or new-critical (a critical problem that was not there last run).

Pricing

Pay per event, platform usage included:

EventPrice
Actor start$0.01 per run
domain-checked – one domain checked$3.00 per 1,000 domains ($0.003 each)

Example: 5 domains checked weekly ≈ 4 × ($0.01 + 5 × $0.003) = $0.10 per month.

日本語での説明

自分のドメインを毎週チェックし、ドメインや SSL 証明書の期限切れが近いこと、SPF・DMARC・DKIM(メールが迷惑メール扱いにならないための設定)が壊れていないか、DNS(ネームサーバー・MX など)が変わっていないかを知らせます。前回の結果を覚えているので、「先週まであった DMARC が消えた」のような事故を見つけられます。サイトの中身は読まず、個人情報も扱いません。.jp ドメインは公開の RDAP がないため、ドメインの期限は「不明」と表示します(SSL とメールのチェックはできます)。

料金: 1回 $0.01 + 1ドメイン $0.003。