domain.failed

Fires if a pending domain stays unresolvable past a threshold (about 7 days of failed checks), or if cert issuance failed irrecoverably (e.g. CAA records that don't authorize Let's Encrypt).

Payload

{
  "id": "<event-id>",
  "type": "domain.failed",
  "createdAt": "2026-05-12T11:39:19.406Z",
  "data": {
    "id": "8f09b47c-...",
    "hostname": "shop.acme.com",
    "status": "failed"
  }
}

Use it for

• Re-prompting the customer to fix their DNS
• Escalating to support
• Surfacing the corresponding monitorMessage in your customer's UI

See Monitor states and CAA records for what specifically went wrong.