Alert reference — every signal DomainCare emits
Complete list of all 64 alerts DomainCare can emit, grouped by check type, with tone and one-line descriptions.
Last updated 11 min read
Alert reference — every signal DomainCare emits
DomainCare emits alerts when something changes or goes wrong on your domain. Every alert has a tone that tells you how urgent it is.
Alert tones
| Tone | Colour | What it means |
|---|---|---|
| Failure | Red | Something is broken and likely affecting users or deliverability right now. Act immediately. |
| Warning | Amber | A problem is developing or a risk exists. Investigate soon. |
| Recovery | Green | A previous failure or warning has been resolved. No action required. |
| Info | Blue | Something changed that is worth knowing about, but is not an error. Review at your convenience. |
Uptime
Alerts from the HTTP probe that runs every minute.
| Event | Tone | Description |
|---|---|---|
website_down | Failure | Server did not respond or returned a 5xx error. Details |
website_back_online | Recovery | Server is reachable again after a down event. Details |
website_slow_response | Warning | Response time exceeded the slow-response threshold. Details |
http_status_code_change | Info | The HTTP status code returned by the server changed. Details |
SSL
Alerts from the TLS certificate and cipher inspection check.
| Event | Tone | Description |
|---|---|---|
ssl_cert_expired | Failure | Certificate has passed its expiry date. Details |
ssl_cert_expiry_warning | Warning | Certificate expires within 60, 30, 15, 7, or 5 days. Details |
ssl_validation_issue | Failure | Chain is invalid, hostname mismatch, or cert is self-signed. Details |
ssl_weak_protocol_detected | Warning | Server accepts TLS 1.1 or an older deprecated protocol. Details |
ssl_weak_cipher_detected | Warning | Server accepts a known-weak cipher suite. Details |
ssl_recovered | Recovery | Certificate is valid again after a failure event. Details |
ssl_certificate_renewed | Info | A new certificate with a later expiry replaced the previous one. Details |
Registry
Alerts from the RDAP domain registration check.
| Event | Tone | Description |
|---|---|---|
domain_expired | Failure | Domain registration has lapsed. Details |
domain_expiry_warning | Warning | Domain registration expires soon. Details |
domain_hold_detected | Failure | Registrar or registry has placed a hold on the domain. Details |
rdap_recovered | Recovery | Registry holds have been cleared. Details |
DNS
Alerts from the DNS record monitoring check.
| Event | Tone | Description |
|---|---|---|
dns_records_changed | Warning | One or more DNS records changed since the last check. Details |
cname_records_changed | Warning | CNAME records changed. Details |
mx_records_missing | Failure | No MX records found — domain cannot receive email. Details |
mx_records_changed | Warning | MX records changed. Details |
mx_recovered | Recovery | MX records restored after a missing or error state. Details |
txt_records_changed | Warning | TXT records changed. Details |
resolved_ip_changed | Warning | The IP addresses the domain resolves to have changed. Details |
caa_records_changed | Warning | CAA records changed — controls which CAs can issue certificates. Details |
caa_records_missing | Warning | No CAA records found. Details |
caa_recovered | Recovery | CAA records restored after a missing or changed state. Details |
soa_primary_ns_changed | Warning | SOA primary nameserver field changed. Details |
mx_ptr_mismatch | Failure | Reverse DNS (PTR) for MX host does not match forward DNS. Details |
mx_ptr_missing | Warning | No PTR record found for MX host IP. Details |
mx_ptr_recovered | Recovery | MX PTR record restored after a missing or mismatch state. Details |
dns_ttl_dropped_low | Info | TTL on a DNS record dropped below the low-TTL threshold. Details |
Email auth
Alerts from the SPF, DKIM, DMARC, and BIMI inspection check.
| Event | Tone | Description |
|---|---|---|
spf_record_missing | Failure | No SPF record found for the domain. Details |
spf_record_invalid | Failure | SPF record has a syntax error or exceeds the 10-lookup limit. Details |
spf_record_changed | Warning | SPF record changed. Details |
spf_recovered | Recovery | SPF record restored after a missing or invalid state. Details |
dmarc_record_missing | Failure | No DMARC record found at _dmarc.<domain>. Details |
dmarc_record_changed | Warning | DMARC record changed. Details |
dmarc_policy_changed | Warning | The p= policy tag in the DMARC record changed. Details |
dmarc_recovered | Recovery | DMARC record restored after a missing state. Details |
bimi_record_missing | Warning | No BIMI record found. Details |
bimi_recovered | Recovery | BIMI record restored. Details |
dkim_record_missing | Failure | No DKIM TXT record found for the expected selector. Details |
dkim_selector_changed | Warning | The set of DKIM selectors published has changed. Details |
dkim_public_key_issues | Failure | DKIM public key is missing, malformed, or revoked. Details |
dkim_recovered | Recovery | DKIM record restored after a missing or error state. Details |
Robots
Alerts from the robots.txt check.
| Event | Tone | Description |
|---|---|---|
robots_missing | Failure | robots.txt is not reachable at the standard path. Details |
robots_content_changed | Info | robots.txt content changed since the last check. Details |
robots_recovered | Recovery | robots.txt is reachable again after a missing state. Details |
Redirect
Alerts from the canonical redirect chain check.
| Event | Tone | Description |
|---|---|---|
redirect_configuration_issues | Failure | Redirect chain is misconfigured and cannot be followed. Details |
redirect_url_changed | Warning | The final canonical URL after following redirects changed. Details |
redirect_status_code_issues | Warning | Redirect uses a non-standard or problematic status code. Details |
redirect_chain_problems | Failure | Redirect loop detected or chain exceeds maximum length. Details |
Nameservers
Alerts from the authoritative nameserver check.
| Event | Tone | Description |
|---|---|---|
nameserver_not_authoritative | Warning | Nameservers are not responding authoritatively for the domain. Details |
nameserver_count_low | Warning | Fewer than two nameservers found — single point of failure. Details |
nameserver_records_invalid | Failure | Nameserver records are invalid or unresolvable. Details |
nameserver_recovered | Recovery | Nameservers are authoritative again after a warning state. Details |
Sitemap
Alerts from the sitemap.xml check.
| Event | Tone | Description |
|---|---|---|
sitemap_missing_or_invalid | Warning | sitemap.xml is missing or fails to parse as valid XML. Details |
sitemap_recovered | Recovery | sitemap.xml is valid again after a missing or invalid state. Details |
Blacklist
Alerts from the email and web blacklist reputation check.
| Event | Tone | Description |
|---|---|---|
blacklist_listed | Failure | Domain or its mail server IP appears on one or more blacklists. Details |
blacklist_delisted | Recovery | Domain has been removed from all blacklists. Details |
Site Speed
Alerts from the Lighthouse performance check.
| Event | Tone | Description |
|---|---|---|
lighthouse_score_dropped | Info | Lighthouse performance score dropped since the last check. Details |
Security Headers
Alerts from the security headers grading check.
| Event | Tone | Description |
|---|---|---|
security_headers_grade_dropped | Warning | Security headers grade dropped since the last check. Details |
security_header_misconfigured | Warning | A security header is missing or misconfigured. Details |
Open Ports
Alerts from the daily dangerous-port scan.
| Event | Tone | Description |
|---|---|---|
dangerous_port_exposed | Failure | A port flagged as dangerous is open and reachable. Details |
dangerous_port_closed | Recovery | A previously exposed dangerous port is no longer reachable. Details |
Was this page helpful?