Domain expiry, registrar lock, DNSSEC and email-authentication monitoring

The domain is the one dependency everything else hangs off. PulseTrace reads the registry record over RDAP on every check — expiry date, registrar, transfer lock, nameservers — verifies DNSSEC, and grades SPF, DKIM and DMARC so a lapsed renewal or a spoofable mail domain is caught early.

Domain problems don't look like outages until it's far too late: an auto-renew that silently failed, a transfer lock that was never set, a DMARC policy still at 'none'. The Domain Security monitor turns those into a grade and a set of change events, so the day a registrar record changes you know.

Because the registry data is fetched from RDAP (the successor to WHOIS) it is structured and reliable across TLDs, and every change — a new nameserver, a status flag, an expiry that moved — lands on the same timeline as your uptime.

• Expiry tracking with the registry expiry date on every check, plus registrar and transfer-lock change detection.
• DNSSEC validation — a broken chain is a change, not a silent failure.
• Email authentication grades SPF, DKIM and DMARC policy strength.
• Look-alike domain watch (Pro) flags newly registered names that resemble yours.