DomainMate

Appearance

DomainMateDomain & Security Monitoring

A Python tool that checks domain expiration, SSL certificates, DNS security records, HTTP headers, and IP blacklist status.

Get Started
View on GitHub
DomainMate Dashboard
🔍

Domain Validity Monitoring

WHOIS expiration tracking with parent domain detection for subdomains.

🔒

SSL/TLS Check

Certificate expiration date and detection of deprecated TLS 1.0/1.1 protocols (where supported by the local OpenSSL build).

📧

DNS Security Records

Checks for SPF and DMARC records. DKIM is optional and not automatically detected.

🛡️

IP Reputation

Checks the domain's IP against common RBLs (Spamhaus, SORBS, SpamCop, Barracuda, UCEPROTECT) using standard DNS queries.

🔐

HTTP Security Headers

Checks for HSTS, CSP, X-Frame-Options, X-Content-Type-Options, and server information disclosure.

📊

HTML Reports

Generates self-contained HTML reports with DataTables for filtering and sorting.

🌐

DNS Fallback

RobustResolver tries multiple public DNS providers and falls back to DNS-over-HTTPS (Cloudflare) if all fail.

🔔

Notifications

Sends alerts via GitHub Issues, GitLab Issues, Telegram, Microsoft Teams, Email, and generic Webhooks.

🐳

Docker & CI/CD

Includes a Dockerfile and example GitHub Actions / GitLab CI configurations.

Quick Example ​

yaml
# config.yaml
domains:
  - example.com
  - mysite.io

monitors:
  domain:
    enabled: true
    expiry_warning_days: 30
  ssl:
    enabled: true
    expiry_warning_days: 30
  dns:
    enabled: true
  security:
    enabled: true
  blacklist:
    enabled: true

reports:
  output_dir: "reports"
bash
# Run the audit
python src/cli.py --config config.yaml --notify

Why DomainMate? ​

DomainMate's DNS resolver (RobustResolver) tries multiple public resolvers and falls back to DNS-over-HTTPS if all standard DNS queries fail. This helps in restricted network environments where certain DNS servers may be blocked.

Architecture Overview ​

┌─────────────────────────────────────────────────────────┐
│                     DomainMate Core                     │
├─────────────────────────────────────────────────────────┤
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐ │
│  │   Domain     │  │     SSL      │  │     DNS      │ │
│  │   Monitor    │  │   Monitor    │  │   Monitor    │ │
│  └──────────────┘  └──────────────┘  └──────────────┘ │
│  ┌──────────────┐  ┌──────────────┐                   │
│  │   Security   │  │  Blacklist   │                   │
│  │   Monitor    │  │   Monitor    │                   │
│  └──────────────┘  └──────────────┘                   │
├─────────────────────────────────────────────────────────┤
│              RobustResolver (DoH Fallback)              │
├─────────────────────────────────────────────────────────┤
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐ │
│  │   Reports    │  │Notifications │  │     API      │ │
│  │   (HTML)     │  │  (Multi-ch)  │  │   Webhooks   │ │
│  └──────────────┘  └──────────────┘  └──────────────┘ │
└─────────────────────────────────────────────────────────┘

Get Started ​

Head over to the Getting Started guide.

Released under the MIT License. · Privacy & legal

Copyright © 2024-present DomainMate