# Domain monitor and DNS propagation

Expiry, registrar and DNS change alerts, email security, blocklists and propagation checks.

Domain monitor works on the website picked in the header switcher. Open Dashboard → Domain monitor and add the domains you want to watch: the website's own domain plus any brand, campaign or defensive domains.

## What's checked

- Registration: expiry date, registrar, status codes (including holds and pending deletion), nameservers, transfer lock and DNSSEC, read from the official registry data.
- Certificate: expiry, issuer, the full chain, whether browsers trust it and whether it covers the domain name. If the bare domain has no certificate, the www host is checked.
- DNS: A, AAAA, CNAME, MX, NS, TXT and CAA records on the domain, and A, AAAA and CNAME on its www host.
- Email security: SPF (including the 10-lookup limit), DMARC policy and reporting, DKIM on common selectors and MTA-STS, graded A to F with what to fix.
- Blocklists: the domain's server addresses against major spam blocklists.

## Alerts

Choose the days before expiry to be warned, separately for the registration (60, 30, 14, 7 and 1 by default) and the certificate (30, 14, 7 and 1). Each threshold alerts once per expiry date, and you're told when it renews. Changes to the registrar, nameservers, transfer lock, DNS records, certificate issuer, email grade or blocklist status raise an alert too. Alerts go to the notification bell, by email for warnings and critical alerts, and to your webhooks. Every change is kept on the domain's history timeline.

## DNS propagation

Dashboard → Domain monitor → DNS propagation asks resolvers in more than 50 locations across six continents for a record and shows each answer on a map and in a list, how consistent they are and how long resolvers may cache the old value. Enter the value you expect to see which locations have picked up your change. When a watched record changes, a propagation check runs on its own and appears on the domain's page.

## Limits

- Domains per website: Starter 3, Growth 10, Scale 25, Pro 75, Business 200, Enterprise 1,000.
- Checked every 24, 12, 6, 3, 1 and 1 hours. You can run a check yourself at any time.
- Propagation checks per day: 20, 100, 300, 1,000, 3,000 and 10,000.
- Change history kept: 90 days, 180 days, 1, 2, 3 and 5 years.

## Elsewhere

Reports have a Domains section with expiry dates, certificate and email grades and recent changes. Webhooks: domains.change.detected and domains.expiry.warning.