Skip to content
AI Inbx
Esc
↑↓navigate↵open⌘Jpreview

domain.at_risk

A verified domain’s DKIM record is missing from DNS: two of its last three checks did not find it, even with one between that did. It still sends; if the record is not back, and held for an hour, by stops_sending_at (72 hours after the first miss) the domain is lost. Sent only for the domain that holds the records: a wildcard’s subdomains get none of their own.

POSTdomain.at_riskWebhook
Header parameters
AIInbx-Signaturestringrequired

t=<unix seconds>,v1=<hmac>: an HMAC-SHA256 of the timestamp and the raw body, with one v1 per secret while a rotation's grace period runs.

AIInbx-Event-IDstringrequired

The event id, id in the body.

Request body
requiredapplication/json
idstringrequired

The event, evt_…. Stable across retries and replays: deduplicate on it.

matches ^[a-z]+_[0-9a-f]{32}$
typestringrequired
created_atstring<date-time>required

When the event happened.

matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
space_idstring | nullrequired

Which space a resource is in. Null is the workspace itself — what every resource of a workspace that has no spaces says.

Show properties
Any of:
string
string
null
null
dataobjectrequired
Show properties
domain_idstringrequired

The domain, dom_….

matches ^[a-z]+_[0-9a-f]{32}$
namestringrequired

The domain name.

regionstringrequired

The region it sends and receives in.

Allowed:eu-central-1us-east-1
dkim_missing_sincestring<date-time>required

When the domain's DKIM record was found missing from DNS. The domain keeps sending meanwhile.

matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
stops_sending_atstring<date-time>required

When the domain is lost if the DKIM record is not restored: 72 hours after dkim_missing_since. Then verified_at goes null and domain.lost is sent.

matches ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
Responses
2XX

Acknowledges the delivery. Anything else, or no answer within 10 seconds, is retried; a Retry-After header is honoured over the standard backoff.

Payload
{
  "id": "string",
  "type": "domain.at_risk",
  "created_at": "2019-08-24T14:15:22Z",
  "space_id": "string",
  "data": {
    "domain_id": "string",
    "name": "string",
    "region": "eu-central-1",
    "dkim_missing_since": "2019-08-24T14:15:22Z",
    "stops_sending_at": "2019-08-24T14:15:22Z"
  }
}
Response
Acknowledges the delivery. Anything else, or no answer within 10 seconds, is retried; a `Retry-After` header is honoured over the standard backoff.