Pricing

from $1.80 / 1,000 domain checkeds

Try for free

Go to Apify Store

Bulk WHOIS, DNS & SSL Expiry Checker: Domain Health

Try for free

Bulk-check domains in one run: WHOIS/RDAP age, expiry date and registrar, DNS (A, MX, NS, SPF, DMARC, CAA), SSL certificate validity and expiry, and HTTP→HTTPS redirects, with plain-language issues. Ideal for expiry monitoring and email-security audits. $3.00 per 1,000 domains.

Pricing

from $1.80 / 1,000 domain checkeds

Rating

0.0

(0)

Developer

Aaron Allday

Actor stats

Bookmarked

Total users

Monthly active users

10 days ago

Last modified

Domain Availability, Expiry, WHOIS, DNS, IP, ASN, 70+ TLD

datascoutapi/DomainDaddy

Domain availability and expiry dates, WHOIS & RDAP data, DNS (A, MX, NS, TXT), IP geolocation and ASN details, calculates domain age, and supports batch processing. Supports 70+ TLDs, handles errors gracefully, and delivers clean, structured JSON output.

halam

134

5.0

(4)

Website HTTPS & SSL Health Checker

pillowy_travel/website-https-ssl-health-checker

Checks HTTPS availability and SSL certificate health for given URLs

SAHIL KUMAR

5.0

(2)

Domain Checker — WHOIS, DNS & SSL Lookup API

vivid_astronaut/domain-checker

Check domain availability and fetch WHOIS records, DNS records, and SSL certificate details in one call. Supports bulk domain lists — useful for domain research, brand monitoring, and infrastructure audits.

BRAINIALL Team

Domain Health Checker

zinin/domain-health-checker

Audit DNS resolution, MX, SPF, DMARC, name servers, and TLS for a list of domains. Complete evidence cards include a 0–100 score, source states, issues, confidence, data gaps, and a next action. Incomplete or unsafe destinations remain unscored and are not billed as results.

Tim Zinin

5.0

(1)

Bulk Domain Checker: WHOIS Lookup, DNS, SSL & HTTP

aiqlabs/bulk-domain-checker

Check a list of domains in one run: DNS records, mail provider from MX, SPF/DMARC, HTTP status and full redirect chain, SSL certificate expiry, and WHOIS/RDAP registration - plus a plain-English issue list per domain. No API keys.

Ai-Q Labs

Bulk URL Status Checker — Broken Links, Redirects & SSL

hipersoft/bulk-url-checker

Check thousands of URLs over plain HTTP: status codes, broken links (404/410/5xx), full redirect chains, response time, content type, page title and SSL certificate expiry.

hiper soft

Domain WHOIS Lookup - Age, Expiry, Registrar, DNS

george.the.developer/domain-whois-lookup

Look up WHOIS data, domain age, expiration date, registrar, nameservers, and DNS records for any domain. Bulk lookup supported.

George Kioko

Domain Inspector — WHOIS/RDAP, DNS & SSL

hipersoft/domain-inspector

Inspect any list of domains: registrar, registration/expiry dates and status via RDAP; DNS records (A, AAAA, MX, NS, TXT, CNAME); and SSL certificate issuer and expiry. Bulk-ready, no setup. Great for domain portfolios, security audits and lead research.

hiper soft

SSL Certificate Monitor — Bulk Expiry & Chain Checker

accurate_pouch/ssl-monitor

Monitor SSL/TLS certificates in bulk. Expiry dates, issuer, protocol version, key size, certificate chain, SAN list. Webhook alerts for expiring certs. 5 domains free.

Manchitt Sanan

Domain WHOIS, DNS and SSL Expiry Lookup (RDAP)

pistachio_implementation/domain-whois-dns-ssl-lookup

Bulk domain lookup from official sources. Registrar, creation date, age and expiry date via RDAP, the modern WHOIS; A, MX, NS, TXT, SPF and DMARC records; and the SSL certificate issuer and days to expiry. $1.50 per 1,000 domains.

Hay Equipos

{ "name": "domain-health-checker", "version": "0.1.0", "type": "module", "description": "Bulk domain checker: WHOIS/RDAP (age, expiry, registrar), DNS (A, MX, NS, SPF, DMARC, CAA), SSL certificate expiry and HTTPS redirect.", "main": "src/main.js", "scripts": { "start": "node src/main.js", "test": "node --test test/*.test.js" }, "dependencies": { "apify": "^3.7.2" }, "license": "ISC" }

[{ "domain": "this-domain-surely-does-not-exist-9876.com", "inputValue": "this-domain-surely-does-not-exist-9876.com", "checkedAt": "2026-10-10T17:52:24.044Z", "issueCount": 3, "issues": [ "Domain appears unregistered", "Domain does not resolve (no A/AAAA records)", "Website unreachable: ENOTFOUND" ], "registrar": null, "domainCreatedAt": null, "domainAgeDays": null, "domainExpiresAt": null, "domainDaysUntilExpiry": null, "sslValid": false, "sslIssuer": null, "sslExpiresAt": null, "sslDaysUntilExpiry": null, "hasSpf": false, "hasDmarc": false, "dmarcPolicy": null, "mxProvider": null, "httpsRedirect": null, "finalUrl": "https://this-domain-surely-does-not-exist-9876.com/", "finalStatus": null, "whois": { "source": "https://rdap.verisign.com/com/v1/", "registered": false, "error": "Domain not found in registry (possibly unregistered)" }, "dns": { "a": [], "aaaa": [], "mx": [], "ns": [], "txtCount": 0, "spf": null, "hasSpf": false, "dmarc": null, "hasDmarc": false, "dmarcPolicy": null, "caa": [], "resolves": false, "errors": [] }, "ssl": { "host": "this-domain-surely-does-not-exist-9876.com", "valid": false, "error": null, "skipped": "Domain does not resolve" }, "http": { "finalUrl": "https://this-domain-surely-does-not-exist-9876.com/", "finalStatus": null, "redirectCount": 0, "redirectChain": [], "hsts": null, "server": null, "responseTimeMs": 105, "error": "ENOTFOUND", "httpError": "ENOTFOUND", "httpPortReachable": false, "httpsRedirect": null, "servesHttps": false } }, { "domain": "example.com", "inputValue": "example.com", "checkedAt": "2026-10-10T17:52:24.014Z", "issueCount": 1, "issues": [ "HTTP does not redirect to HTTPS" ], "registrar": "RESERVED-Internet Assigned Numbers Authority", "domainCreatedAt": "1995-08-14T04:00:00Z", "domainAgeDays": 11380, "domainExpiresAt": "2027-08-13T04:00:00Z", "domainDaysUntilExpiry": 306, "sslValid": true, "sslIssuer": "SSL Corporation", "sslExpiresAt": "2026-12-25T22:56:35.000Z", "sslDaysUntilExpiry": 76, "hasSpf": true, "hasDmarc": true, "dmarcPolicy": "reject", "mxProvider": "", "httpsRedirect": false, "finalUrl": "http://example.com/", "finalStatus": 200, "whois": { "source": "https://rdap.verisign.com/com/v1/", "registered": true, "domainName": "example.com", "registrar": "RESERVED-Internet Assigned Numbers Authority", "registrarIanaId": "376", "registrarAbuseEmail": null, "createdAt": "1995-08-14T04:00:00Z", "updatedAt": "2026-08-14T08:01:43Z", "expiresAt": "2027-08-13T04:00:00Z", "domainAgeDays": 11380, "daysUntilExpiry": 306, "status": [ "client delete prohibited", "client transfer prohibited", "client update prohibited" ], "nameservers": [ "elliott.ns.cloudflare.com", "hera.ns.cloudflare.com" ], "dnssec": true }, "dns": { "a": [ "172.66.147.243", "104.20.23.154" ], "aaaa": [ "2606:4700:10::6814:179a", "2606:4700:10::ac42:93f3" ], "mx": [ { "priority": 0, "host": "" } ], "ns": [ "hera.ns.cloudflare.com", "elliott.ns.cloudflare.com" ], "txtCount": 2, "spf": "v=spf1 -all", "hasSpf": true, "dmarc": "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s", "hasDmarc": true, "dmarcPolicy": "reject", "caa": [], "resolves": true, "errors": [] }, "ssl": { "host": "example.com", "valid": true, "error": null, "protocol": "TLSv1.3", "subject": "example.com", "issuer": "SSL Corporation", "validFrom": "2026-09-26T22:49:11.000Z", "validTo": "2026-12-25T22:56:35.000Z", "daysUntilExpiry": 76, "sanCount": 2, "coversHost": true, "serialNumber": "01EEE6AABB521D5E14FC315FD9985690" }, "http": { "finalUrl": "http://example.com/", "finalStatus": 200, "redirectCount": 0, "redirectChain": [ { "url": "http://example.com/", "status": 200 } ], "hsts": null, "server": "cloudflare", "responseTimeMs": 250, "error": null, "httpPortReachable": true, "httpsRedirect": false, "servesHttps": false } }, { "domain": "apify.com", "inputValue": "apify.com", "checkedAt": "2026-10-10T17:52:23.956Z", "issueCount": 0, "issues": [], "registrar": "Amazon Registrar, Inc.", "domainCreatedAt": "2009-06-02T17:14:10Z", "domainAgeDays": 6339, "domainExpiresAt": "2035-06-02T17:14:10Z", "domainDaysUntilExpiry": 3156, "sslValid": true, "sslIssuer": "Amazon", "sslExpiresAt": "2027-01-16T23:59:59.000Z", "sslDaysUntilExpiry": 98, "hasSpf": true, "hasDmarc": true, "dmarcPolicy": "reject", "mxProvider": "aspmx.l.google.com", "httpsRedirect": true, "finalUrl": "https://apify.com/", "finalStatus": 200, "whois": { "source": "https://rdap.verisign.com/com/v1/", "registered": true, "domainName": "apify.com", "registrar": "Amazon Registrar, Inc.", "registrarIanaId": "468", "registrarAbuseEmail": "trustandsafety@support.aws.com", "createdAt": "2009-06-02T17:14:10Z", "updatedAt": "2026-05-16T16:53:04Z", "expiresAt": "2035-06-02T17:14:10Z", "domainAgeDays": 6339, "daysUntilExpiry": 3156, "status": [ "client transfer prohibited" ], "nameservers": [ "ns-1225.awsdns-25.org", "ns-1928.awsdns-49.co.uk", "ns-449.awsdns-56.com", "ns-839.awsdns-40.net" ], "dnssec": true }, "dns": { "a": [ "3.170.42.68", "3.170.42.76", "3.170.42.100", "3.170.42.109" ], "aaaa": [ "2600:9000:2870:400:9:a03e:6540:93a1", "2600:9000:2870:4e00:9:a03e:6540:93a1", "2600:9000:2870:5400:9:a03e:6540:93a1", "2600:9000:2870:5600:9:a03e:6540:93a1", "2600:9000:2870:6800:9:a03e:6540:93a1", "2600:9000:2870:8e00:9:a03e:6540:93a1", "2600:9000:2870:9600:9:a03e:6540:93a1", "2600:9000:2870:9800:9:a03e:6540:93a1" ], "mx": [ { "priority": 1, "host": "aspmx.l.google.com" }, { "priority": 5, "host": "alt1.aspmx.l.google.com" }, { "priority": 5, "host": "alt2.aspmx.l.google.com" }, { "priority": 10, "host": "aspmx2.googlemail.com" }, { "priority": 10, "host": "aspmx3.googlemail.com" } ], "ns": [ "ns-449.awsdns-56.com", "ns-839.awsdns-40.net", "ns-1225.awsdns-25.org", "ns-1928.awsdns-49.co.uk" ], "txtCount": 11, "spf": "v=spf1 a mx include:_spf.google.com include:mailgun.org include:amazonses.com include:19497222.spf05.hubspotemail.net -all", "hasSpf": true, "dmarc": "v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:dmarc-reports@apify.com; ri=604800", "hasDmarc": true, "dmarcPolicy": "reject", "caa": [ "0 issue \"amazonaws.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \"amazonaws.com\"", "0 issuewild \"letsencrypt.org\"" ], "resolves": true, "errors": [] }, "ssl": { "host": "apify.com", "valid": true, "error": null, "protocol": "TLSv1.3", "subject": "*.apify.com", "issuer": "Amazon", "validFrom": "2026-07-03T00:00:00.000Z", "validTo": "2027-01-16T23:59:59.000Z", "daysUntilExpiry": 98, "sanCount": 4, "coversHost": true, "serialNumber": "033947021329345FC779537CD9A338FD" }, "http": { "finalUrl": "https://apify.com/", "finalStatus": 200, "redirectCount": 1, "redirectChain": [ { "url": "http://apify.com/", "status": 301 }, { "url": "https://apify.com/", "status": 200 } ], "hsts": "max-age=15768000", "server": null, "responseTimeMs": 411, "error": null, "httpPortReachable": true, "httpsRedirect": true, "servesHttps": true } }, { "domain": "crawlee.dev", "inputValue": "crawlee.dev", "checkedAt": "2026-10-10T17:52:24.006Z", "issueCount": 0, "issues": [], "registrar": "GoDaddy.com, LLC", "domainCreatedAt": "2022-07-08T11:32:18.234Z", "domainAgeDays": 1555, "domainExpiresAt": "2028-07-08T11:32:18.234Z", "domainDaysUntilExpiry": 636, "sslValid": true, "sslIssuer": "Amazon", "sslExpiresAt": "2027-04-19T23:59:59.000Z", "sslDaysUntilExpiry": 191, "hasSpf": false, "hasDmarc": false, "dmarcPolicy": null, "mxProvider": null, "httpsRedirect": true, "finalUrl": "https://crawlee.dev/", "finalStatus": 200, "whois": { "source": "https://pubapi.registry.google/rdap/", "registered": true, "domainName": "crawlee.dev", "registrar": "GoDaddy.com, LLC", "registrarIanaId": "146", "registrarAbuseEmail": "abuse@godaddy.com", "createdAt": "2022-07-08T11:32:18.234Z", "updatedAt": "2026-08-22T11:32:18.234Z", "expiresAt": "2028-07-08T11:32:18.234Z", "domainAgeDays": 1555, "daysUntilExpiry": 636, "status": [ "client delete prohibited", "client renew prohibited", "client transfer prohibited", "client update prohibited" ], "nameservers": [ "ns-1067.awsdns-05.org", "ns-1761.awsdns-28.co.uk", "ns-330.awsdns-41.com", "ns-919.awsdns-50.net" ], "dnssec": true }, "dns": { "a": [ "18.67.65.28", "18.67.65.52", "18.67.65.89", "18.67.65.128" ], "aaaa": [ "2600:9000:2269:a00:12:c43c:aa80:93a1", "2600:9000:2269:2400:12:c43c:aa80:93a1", "2600:9000:2269:5800:12:c43c:aa80:93a1", "2600:9000:2269:5a00:12:c43c:aa80:93a1", "2600:9000:2269:8c00:12:c43c:aa80:93a1", "2600:9000:2269:9000:12:c43c:aa80:93a1", "2600:9000:2269:ae00:12:c43c:aa80:93a1", "2600:9000:2269:c600:12:c43c:aa80:93a1" ], "mx": [], "ns": [ "ns-330.awsdns-41.com", "ns-919.awsdns-50.net", "ns-1067.awsdns-05.org", "ns-1761.awsdns-28.co.uk" ], "txtCount": 1, "spf": null, "hasSpf": false, "dmarc": null, "hasDmarc": false, "dmarcPolicy": null, "caa": [], "resolves": true, "errors": [] }, "ssl": { "host": "crawlee.dev", "valid": true, "error": null, "protocol": "TLSv1.3", "subject": "*.crawlee.dev", "issuer": "Amazon", "validFrom": "2026-10-04T00:00:00.000Z", "validTo": "2027-04-19T23:59:59.000Z", "daysUntilExpiry": 191, "sanCount": 2, "coversHost": true, "serialNumber": "07007C6A3C2CF3BA18A9BFF2D56384CF" }, "http": { "finalUrl": "https://crawlee.dev/", "finalStatus": 200, "redirectCount": 1, "redirectChain": [ { "url": "http://crawlee.dev/", "status": 301 }, { "url": "https://crawlee.dev/", "status": 200 } ], "hsts": "max-age=31556952", "server": "nginx", "responseTimeMs": 322, "error": null, "httpPortReachable": true, "httpsRedirect": true, "servesHttps": true } }, { "domain": "apify.io", "inputValue": "apify.io", "checkedAt": "2026-10-10T17:52:24.036Z", "issueCount": 1, "issues": [ "Has MX records but no DMARC record" ], "registrar": null, "domainCreatedAt": null, "domainAgeDays": null, "domainExpiresAt": null, "domainDaysUntilExpiry": null, "sslValid": true, "sslIssuer": "Google Trust Services", "sslExpiresAt": "2027-01-02T04:14:39.000Z", "sslDaysUntilExpiry": 83, "hasSpf": true, "hasDmarc": false, "dmarcPolicy": null, "mxProvider": "route3.mx.cloudflare.net", "httpsRedirect": true, "finalUrl": "https://apify.io/", "finalStatus": 200, "whois": { "source": null, "error": "No public RDAP service for .io (WHOIS data not available for this TLD)" }, "dns": { "a": [ "172.67.186.184", "104.21.43.224" ], "aaaa": [ "2606:4700:3030::ac43:bab8", "2606:4700:3033::6815:2be0" ], "mx": [ { "priority": 10, "host": "route3.mx.cloudflare.net" }, { "priority": 29, "host": "route2.mx.cloudflare.net" }, { "priority": 80, "host": "route1.mx.cloudflare.net" } ], "ns": [ "clay.ns.cloudflare.com", "vera.ns.cloudflare.com" ], "txtCount": 4, "spf": "v=spf1 include:_spf.mx.cloudflare.net ~all", "hasSpf": true, "dmarc": null, "hasDmarc": false, "dmarcPolicy": null, "caa": [], "resolves": true, "errors": [] }, "ssl": { "host": "apify.io", "valid": true, "error": null, "protocol": "TLSv1.3", "subject": "apify.io", "issuer": "Google Trust Services", "validFrom": "2026-10-04T03:15:47.000Z", "validTo": "2027-01-02T04:14:39.000Z", "daysUntilExpiry": 83, "sanCount": 2, "coversHost": true, "serialNumber": "1034C7245FC874DE0E69D9AF7790CE61" }, "http": { "finalUrl": "https://apify.io/", "finalStatus": 200, "redirectCount": 1, "redirectChain": [ { "url": "http://apify.io/", "status": 301 }, { "url": "https://apify.io/", "status": 200 } ], "hsts": null, "server": "cloudflare", "responseTimeMs": 423, "error": null, "httpPortReachable": true, "httpsRedirect": true, "servesHttps": true } }, { "domain": "http.badssl.com", "inputValue": "http.badssl.com", "checkedAt": "2026-10-10T17:52:24.029Z", "issueCount": 1, "issues": [ "HTTP does not redirect to HTTPS" ], "registrar": "MarkMonitor Inc.", "domainCreatedAt": "2015-04-07T22:09:30Z", "domainAgeDays": 4203, "domainExpiresAt": "2027-04-07T22:09:30Z", "domainDaysUntilExpiry": 179, "sslValid": true, "sslIssuer": "Let's Encrypt", "sslExpiresAt": "2026-12-28T20:02:55.000Z", "sslDaysUntilExpiry": 79, "hasSpf": false, "hasDmarc": false, "dmarcPolicy": null, "mxProvider": null, "httpsRedirect": false, "finalUrl": "http://http.badssl.com/", "finalStatus": 200, "whois": { "source": "https://rdap.verisign.com/com/v1/", "registered": true, "domainName": "badssl.com", "registrar": "MarkMonitor Inc.", "registrarIanaId": "292", "registrarAbuseEmail": "abusecomplaints@markmonitor.com", "createdAt": "2015-04-07T22:09:30Z", "updatedAt": "2026-03-06T10:32:49Z", "expiresAt": "2027-04-07T22:09:30Z", "domainAgeDays": 4203, "daysUntilExpiry": 179, "status": [ "client delete prohibited", "client transfer prohibited", "client update prohibited" ], "nameservers": [ "ns-cloud-c1.googledomains.com", "ns-cloud-c2.googledomains.com", "ns-cloud-c3.googledomains.com", "ns-cloud-c4.googledomains.com" ], "dnssec": false }, "dns": { "a": [ "104.154.89.105" ], "aaaa": [], "mx": [], "ns": [], "txtCount": 0, "spf": null, "hasSpf": false, "dmarc": null, "hasDmarc": false, "dmarcPolicy": null, "caa": [], "resolves": true, "errors": [] }, "ssl": { "host": "http.badssl.com", "valid": true, "error": null, "protocol": "TLSv1.2", "subject": "*.badssl.com", "issuer": "Let's Encrypt", "validFrom": "2026-09-29T20:02:56.000Z", "validTo": "2026-12-28T20:02:55.000Z", "daysUntilExpiry": 79, "sanCount": 2, "coversHost": true, "serialNumber": "065C62C1D5361BD7E6951263A67064063934" }, "http": { "finalUrl": "http://http.badssl.com/", "finalStatus": 200, "redirectCount": 0, "redirectChain": [ { "url": "http://http.badssl.com/", "status": 200 } ], "hsts": null, "server": "nginx/1.10.3 (Ubuntu)", "responseTimeMs": 313, "error": null, "httpPortReachable": true, "httpsRedirect": false, "servesHttps": false } }, { "domain": "expired.badssl.com", "inputValue": "expired.badssl.com", "checkedAt": "2026-10-10T17:52:24.023Z", "issueCount": 2, "issues": [ "SSL problem: CERT_HAS_EXPIRED", "Website unreachable: CERT_HAS_EXPIRED" ], "registrar": "MarkMonitor Inc.", "domainCreatedAt": "2015-04-07T22:09:30Z", "domainAgeDays": 4203, "domainExpiresAt": "2027-04-07T22:09:30Z", "domainDaysUntilExpiry": 179, "sslValid": false, "sslIssuer": "COMODO CA Limited", "sslExpiresAt": "2015-04-12T23:59:59.000Z", "sslDaysUntilExpiry": -4199, "hasSpf": false, "hasDmarc": false, "dmarcPolicy": null, "mxProvider": null, "httpsRedirect": true, "finalUrl": "https://expired.badssl.com/", "finalStatus": null, "whois": { "source": "https://rdap.verisign.com/com/v1/", "registered": true, "domainName": "badssl.com", "registrar": "MarkMonitor Inc.", "registrarIanaId": "292", "registrarAbuseEmail": "abusecomplaints@markmonitor.com", "createdAt": "2015-04-07T22:09:30Z", "updatedAt": "2026-03-06T10:32:49Z", "expiresAt": "2027-04-07T22:09:30Z", "domainAgeDays": 4203, "daysUntilExpiry": 179, "status": [ "client delete prohibited", "client transfer prohibited", "client update prohibited" ], "nameservers": [ "ns-cloud-c1.googledomains.com", "ns-cloud-c2.googledomains.com", "ns-cloud-c3.googledomains.com", "ns-cloud-c4.googledomains.com" ], "dnssec": false }, "dns": { "a": [ "104.154.89.105" ], "aaaa": [], "mx": [], "ns": [], "txtCount": 0, "spf": null, "hasSpf": false, "dmarc": null, "hasDmarc": false, "dmarcPolicy": null, "caa": [], "resolves": true, "errors": [] }, "ssl": { "host": "expired.badssl.com", "valid": false, "error": "CERT_HAS_EXPIRED", "protocol": "TLSv1.2", "subject": "*.badssl.com", "issuer": "COMODO CA Limited", "validFrom": "2015-04-09T00:00:00.000Z", "validTo": "2015-04-12T23:59:59.000Z", "daysUntilExpiry": -4199, "sanCount": 2, "coversHost": true, "serialNumber": "4AE79549FA9ABE3F100F17A478E16909" }, "http": { "finalUrl": "https://expired.badssl.com/", "finalStatus": null, "redirectCount": 0, "redirectChain": [ { "url": "http://expired.badssl.com/", "status": 301 } ], "hsts": null, "server": null, "responseTimeMs": 398, "error": "CERT_HAS_EXPIRED", "httpPortReachable": true, "httpsRedirect": true, "servesHttps": false } }]

FROM apify/actor-node:20 COPY --chown=myuser package*.json ./ RUN npm --quiet set progress=false \ && npm install --omit=dev --omit=optional \ && echo "Installed NPM packages:" \ && (npm list --omit=dev --all || true) \ && echo "Node.js version:" && node --version \ && rm -r ~/.npm COPY --chown=myuser . ./ CMD npm start --silent

{ "actorSpecification": 1, "name": "domain-health-checker", "title": "Bulk WHOIS, DNS & SSL Expiry Checker: Domain Health", "description": "Bulk-check domains in one run: WHOIS/RDAP age, expiry date and registrar, DNS (A, MX, NS, SPF, DMARC, CAA), SSL certificate validity and expiry, and HTTP\u2192HTTPS redirects, with plain-language issues. Ideal for expiry monitoring and email-security audits. $3.00 per 1,000 domains.", "version": "0.1", "buildTag": "latest", "input": "./input_schema.json", "output": "./output_schema.json", "storages": { "dataset": "./dataset_schema.json" }, "dockerfile": "./Dockerfile", "minMemoryMbytes": 128, "maxMemoryMbytes": 1024, "defaultMemoryMbytes": 256 }

{ "actorSpecification": 1, "fields": { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "domain": { "type": "string" }, "inputValue": { "type": "string" }, "checkedAt": { "type": "string" }, "issueCount": { "type": "integer" }, "issues": { "type": "array", "items": { "type": "string" } }, "registrar": { "type": ["string", "null"] }, "domainCreatedAt": { "type": ["string", "null"] }, "domainAgeDays": { "type": ["integer", "null"] }, "domainExpiresAt": { "type": ["string", "null"] }, "domainDaysUntilExpiry": { "type": ["integer", "null"] }, "sslValid": { "type": ["boolean", "null"] }, "sslIssuer": { "type": ["string", "null"] }, "sslExpiresAt": { "type": ["string", "null"] }, "sslDaysUntilExpiry": { "type": ["integer", "null"] }, "hasSpf": { "type": ["boolean", "null"] }, "hasDmarc": { "type": ["boolean", "null"] }, "dmarcPolicy": { "type": ["string", "null"] }, "mxProvider": { "type": ["string", "null"] }, "httpsRedirect": { "type": ["boolean", "null"] }, "finalUrl": { "type": ["string", "null"] }, "finalStatus": { "type": ["integer", "null"] }, "whois": { "type": ["object", "null"], "description": "RDAP registration facts (no personal contact data)" }, "dns": { "type": ["object", "null"] }, "ssl": { "type": ["object", "null"] }, "http": { "type": ["object", "null"] } }, "required": ["domain"] }, "views": { "overview": { "title": "Domain health", "transformation": { "fields": ["domain", "issueCount", "issues", "registrar", "domainAgeDays", "domainDaysUntilExpiry", "sslValid", "sslIssuer", "sslDaysUntilExpiry", "hasSpf", "hasDmarc", "dmarcPolicy", "httpsRedirect", "finalStatus"] }, "display": { "component": "table", "properties": { "domain": { "label": "Domain" }, "issueCount": { "label": "Issues", "format": "number" }, "issues": { "label": "Issue details", "format": "array" }, "registrar": { "label": "Registrar" }, "domainAgeDays": { "label": "Age (days)", "format": "number" }, "domainDaysUntilExpiry": { "label": "Domain expires in (days)", "format": "number" }, "sslValid": { "label": "SSL valid", "format": "boolean" }, "sslIssuer": { "label": "SSL issuer" }, "sslDaysUntilExpiry": { "label": "SSL expires in (days)", "format": "number" }, "hasSpf": { "label": "SPF", "format": "boolean" }, "hasDmarc": { "label": "DMARC", "format": "boolean" }, "dmarcPolicy": { "label": "DMARC policy" }, "httpsRedirect": { "label": "HTTPS redirect", "format": "boolean" }, "finalStatus": { "label": "HTTP status", "format": "number" } } } } } }

{ "title": "Domain Health Checker input", "type": "object", "schemaVersion": 1, "properties": { "domains": { "title": "Domains", "type": "array", "description": "Domains or URLs, one per line (example.com, https://www.example.com/page). www. and paths are ignored.", "editor": "stringList", "prefill": ["apify.com", "crawlee.dev", "example.com"], "default": ["apify.com", "crawlee.dev", "example.com"] }, "checks": { "title": "Checks", "type": "array", "description": "Which checks to run.", "editor": "select", "items": { "type": "string", "enum": ["whois", "dns", "ssl", "http"], "enumTitles": ["WHOIS / RDAP (age, expiry, registrar)", "DNS (A, AAAA, MX, NS, SPF, DMARC, CAA)", "SSL certificate", "HTTP → HTTPS redirect"] }, "default": ["whois", "dns", "ssl", "http"] }, "expiryWarnDays": { "title": "Warn when expiring within (days)", "type": "integer", "description": "Domain or SSL expiry closer than this is reported in 'issues'.", "minimum": 1, "maximum": 365, "default": 30 }, "onlyWithIssues": { "title": "Only output domains with issues", "type": "boolean", "description": "Great for scheduled monitoring: you're only charged for domains that need attention.", "default": false }, "maxConcurrency": { "title": "Max concurrency", "type": "integer", "description": "Domains checked in parallel.", "minimum": 1, "maximum": 50, "default": 10 } }, "required": ["domains"] }

{ "actorOutputSchemaVersion": 1, "title": "Domain Health Checker output", "description": "One dataset item per domain with WHOIS/RDAP registration facts (registrar, created, expires, age, status, nameservers, DNSSEC), DNS records (A, AAAA, MX, NS, SPF, DMARC, CAA), SSL certificate (validity, issuer, expiry, SANs), HTTP redirect chain, and a list of plain-language issues. Plus a run summary record.", "properties": { "domains": { "type": "string", "title": "Domain health results", "description": "Per-domain results (default dataset, 'Domain health' view).", "template": "{{links.apiDefaultDatasetUrl}}/items?view=overview" }, "summary": { "type": "string", "title": "Run summary", "description": "JSON summary: domains requested, checked, with issues, saved.", "template": "{{links.apiDefaultKeyValueStoreUrl}}/records/SUMMARY" } } }

1import { test } from 'node:test'; 2import assert from 'node:assert/strict'; 3import http from 'node:http'; 4import { readFileSync } from 'node:fs'; 5import { normalizeDomain, parseRdap, dohQuery, httpCheck, findIssues, fetchJson } from '../src/checks.js'; 6 7const rdap = JSON.parse(readFileSync(new URL('./fixtures/rdap-apify-com.json', import.meta.url))); 8 9test('normalizeDomain', () => { 10 assert.equal(normalizeDomain('https://www.Example.com/path?q=1'), 'example.com'); 11 assert.equal(normalizeDomain('sub.example.co.uk'), 'sub.example.co.uk'); 12 assert.equal(normalizeDomain('not a domain'), null); 13 assert.equal(normalizeDomain('localhost'), null); 14 assert.equal(normalizeDomain('1.2.3.4'), null); 15}); 16 17test('parseRdap extracts registration facts and no personal contacts', () => { 18 const r = parseRdap(rdap, Date.parse('2026-10-10T00:00:00Z')); 19 assert.equal(r.domainName, 'apify.com'); 20 assert.equal(r.registrar, 'Amazon Registrar, Inc.'); 21 assert.equal(r.createdAt, '2009-06-02T17:14:10Z'); 22 assert.ok(r.domainAgeDays > 6000); 23 assert.ok(r.daysUntilExpiry > 3000); 24 assert.equal(r.dnssec, true); 25 assert.ok(r.nameservers.every((n) => n === n.toLowerCase() && !n.endsWith('.'))); 26 assert.equal(JSON.stringify(r).includes('registrant'), false); 27}); 28 29test('dohQuery parses answers, NXDOMAIN and falls back to second resolver', async () => { 30 const ok = (body) => ({ ok: true, status: 200, json: async () => body }); 31 const mx = await dohQuery('a.com', 'MX', { fetchImpl: async () => ok({ Status: 0, Answer: [{ type: 5, data: 'x' }, { type: 15, data: '10 mx.a.com.' }] }) }); 32 assert.deepEqual(mx, ['10 mx.a.com.']); 33 assert.deepEqual(await dohQuery('nx.com', 'A', { fetchImpl: async () => ok({ Status: 3 }) }), []); 34 let n = 0; 35 const r = await dohQuery('a.com', 'A', { fetchImpl: async () => { n++; if (n <= 2) throw new TypeError('fetch failed'); return ok({ Status: 0, Answer: [{ type: 1, data: '1.2.3.4' }] }); } }); 36 assert.deepEqual(r, ['1.2.3.4']); 37}); 38 39test('fetchJson does not retry 404', async () => { 40 let n = 0; 41 await assert.rejects(fetchJson('u', { baseDelayMs: 1, fetchImpl: async () => { n++; return { ok: false, status: 404 }; } }), /404/); 42 assert.equal(n, 1); 43}); 44 45test('httpCheck follows redirect chain and flags missing HTTPS redirect', async () => { 46 const server = http.createServer((req, res) => { 47 if (req.url === '/') { res.writeHead(301, { location: '/a' }); return res.end(); } 48 if (req.url === '/a') { res.writeHead(302, { location: '/final' }); return res.end(); } 49 res.writeHead(200, { server: 'test' }); res.end('ok'); 50 }); 51 await new Promise((r) => server.listen(0, '127.0.0.1', r)); 52 const base = `http://127.0.0.1:${server.address().port}/`; 53 const r = await httpCheck('x', { startUrl: base }); 54 assert.equal(r.finalStatus, 200); assert.equal(r.redirectCount, 2); assert.equal(r.httpsRedirect, false); assert.equal(r.server, 'test'); 55 assert.deepEqual(findIssues({ http: r }), ['HTTP does not redirect to HTTPS']); 56 server.close(); 57}); 58 59test('findIssues covers expiry, SSL, email auth and DNS', () => { 60 const issues = findIssues({ 61 whois: { daysUntilExpiry: 10 }, 62 ssl: { valid: true, error: null, daysUntilExpiry: 5 }, 63 dns: { resolves: true, mx: [{ host: 'mx' }], hasSpf: false, hasDmarc: true, dmarcPolicy: 'none' }, 64 http: { error: null, httpPortReachable: true, httpsRedirect: true, finalStatus: 200 }, 65 }); 66 assert.deepEqual(issues, ['Domain expires in 10 days', 'SSL certificate expires in 5 days', 'Has MX records but no SPF record', 'DMARC policy is p=none (monitoring only)']); 67 assert.deepEqual(findIssues({ ssl: { valid: false, skipped: 'Domain does not resolve' }, dns: { resolves: false, mx: [] } }), ['Domain does not resolve (no A/AAAA records)']); 68});

1// Domain checks: RDAP (WHOIS successor), DNS over HTTPS, TLS certificate, HTTPS reachability. No Apify deps. 2import tls from 'node:tls'; 3 4const UA = 'Mozilla/5.0 (compatible; DomainHealthChecker/1.0; +https://apify.com)'; 5const sleep = (ms) => new Promise((r) => setTimeout(r, ms)); 6const DAY = 86400000; 7const daysBetween = (a, b) => Math.floor((b - a) / DAY); 8 9export async function fetchJson(url, { timeoutMs = 15000, maxRetries = 2, headers = {}, fetchImpl = fetch, baseDelayMs = 800 } = {}) { 10 let last; 11 for (let i = 0; i <= maxRetries; i++) { 12 const ctrl = new AbortController(); const t = setTimeout(() => ctrl.abort(), timeoutMs); 13 try { 14 const res = await fetchImpl(url, { signal: ctrl.signal, redirect: 'follow', headers: { 'user-agent': UA, ...headers } }); 15 if (res.status === 404) { const e = new Error('Not found (404)'); e.status = 404; throw e; } 16 if (res.status === 429 || res.status >= 500) { last = new Error(`HTTP ${res.status}`); last.status = res.status; if (i < maxRetries) { await sleep(baseDelayMs * 2 ** i); continue; } throw last; } 17 if (!res.ok) { const e = new Error(`HTTP ${res.status}`); e.status = res.status; throw e; } 18 return await res.json(); 19 } catch (e) { 20 if (e.status && e.status < 500 && e.status !== 429) throw e; 21 last = e.name === 'AbortError' ? new Error(`Timeout after ${timeoutMs / 1000}s`) : e; 22 if (i < maxRetries) { await sleep(baseDelayMs * 2 ** i); continue; } 23 } finally { clearTimeout(t); } 24 } 25 throw last; 26} 27 28/** Normalize an input (URL, host or domain) to a lowercase hostname without www. */ 29export function normalizeDomain(raw) { 30 let s = String(raw || '').trim().toLowerCase(); 31 if (!s) return null; 32 if (!/^[a-z]+:\/\//.test(s)) s = `http://${s}`; 33 try { 34 const h = new URL(s).hostname.replace(/\.$/, ''); 35 if (!/^[a-z0-9-]+(\.[a-z0-9-]+)+$/.test(h) || /^\d+(\.\d+){3}$/.test(h)) return null; 36 return h.replace(/^www\./, ''); 37 } catch { return null; } 38} 39 40// ---------------- RDAP ---------------- 41let bootstrapPromise = null; 42export function loadRdapBootstrap(fetchImpl) { 43 if (!bootstrapPromise) { 44 bootstrapPromise = fetchJson('https://data.iana.org/rdap/dns.json', { timeoutMs: 20000, fetchImpl }).then((j) => { 45 const map = new Map(); 46 for (const [tlds, urls] of j.services || []) for (const t of tlds) map.set(t.toLowerCase(), urls.find((u) => u.startsWith('https')) || urls[0]); 47 return map; 48 }).catch((e) => { bootstrapPromise = null; throw e; }); 49 } 50 return bootstrapPromise; 51} 52 53const vcardFn = (ent) => ent?.vcardArray?.[1]?.find((x) => x[0] === 'fn')?.[3] || null; 54const vcardEmail = (ent) => ent?.vcardArray?.[1]?.find((x) => x[0] === 'email')?.[3] || null; 55 56/** 57 * Extract only non-personal registration facts: registrar, dates, status, nameservers, DNSSEC. 58 * Registrant/admin/tech contacts are intentionally NOT returned (may be personal data). 59 */ 60export function parseRdap(j, now = Date.now()) { 61 const ev = Object.fromEntries((j.events || []).map((e) => [String(e.eventAction).toLowerCase(), e.eventDate])); 62 const registrar = (j.entities || []).find((e) => (e.roles || []).includes('registrar')); 63 const abuse = (registrar?.entities || []).find((e) => (e.roles || []).includes('abuse')); 64 const created = ev.registration ? Date.parse(ev.registration) : null; 65 const expires = ev.expiration ? Date.parse(ev.expiration) : null; 66 return { 67 domainName: (j.ldhName || '').toLowerCase() || null, 68 registrar: vcardFn(registrar), 69 registrarIanaId: registrar?.publicIds?.find((p) => /iana/i.test(p.type))?.identifier ?? null, 70 registrarAbuseEmail: vcardEmail(abuse), 71 createdAt: ev.registration || null, 72 updatedAt: ev['last changed'] || null, 73 expiresAt: ev.expiration || null, 74 domainAgeDays: created ? daysBetween(created, now) : null, 75 daysUntilExpiry: expires ? daysBetween(now, expires) : null, 76 status: j.status || [], 77 nameservers: (j.nameservers || []).map((n) => String(n.ldhName || '').toLowerCase().replace(/\.$/, '')).filter(Boolean), 78 dnssec: j.secureDNS ? Boolean(j.secureDNS.delegationSigned) : null, 79 }; 80} 81 82export async function rdapLookup(domain, { fetchImpl, now } = {}) { 83 const map = await loadRdapBootstrap(fetchImpl); 84 const labels = domain.split('.'); 85 const tld = labels[labels.length - 1]; 86 let base = map.get(tld); 87 if (!base) return { source: null, error: `No public RDAP service for .${tld} (WHOIS data not available for this TLD)` }; 88 if (!base.endsWith('/')) base += '/'; 89 // Try the host, then strip subdomains until the registrable domain is found. 90 for (let i = 0; i <= labels.length - 2; i++) { 91 const candidate = labels.slice(i).join('.'); 92 try { 93 const j = await fetchJson(`${base}domain/${candidate}`, { headers: { accept: 'application/rdap+json, application/json' }, fetchImpl }); 94 return { source: base, registered: true, ...parseRdap(j, now) }; 95 } catch (e) { 96 if (e.status === 404) continue; 97 return { source: base, error: e.message }; 98 } 99 } 100 return { source: base, registered: false, error: 'Domain not found in registry (possibly unregistered)' }; 101} 102 103// ---------------- DNS over HTTPS ---------------- 104const DOH = ['https://cloudflare-dns.com/dns-query', 'https://dns.google/resolve']; 105export async function dohQuery(name, type, { fetchImpl } = {}) { 106 let last; 107 for (const base of DOH) { 108 try { 109 const j = await fetchJson(`${base}?name=${encodeURIComponent(name)}&type=${type}`, { headers: { accept: 'application/dns-json' }, fetchImpl, timeoutMs: 8000, maxRetries: 1 }); 110 if (j.Status === 3) return []; // NXDOMAIN 111 if (j.Status !== 0) throw new Error(`DNS status ${j.Status}`); 112 const code = { A: 1, NS: 2, CNAME: 5, SOA: 6, MX: 15, TXT: 16, AAAA: 28, CAA: 257 }[type]; 113 return (j.Answer || []).filter((a) => a.type === code).map((a) => a.data); 114 } catch (e) { last = e; } 115 } 116 throw last; 117} 118const unquoteTxt = (s) => String(s).replace(/^"|"$/g, '').replace(/"\s+"/g, ''); 119 120export async function dnsLookup(domain, opts = {}) { 121 const q = (n, t) => dohQuery(n, t, opts).catch((e) => ({ error: e.message })); 122 const [a, aaaa, mx, ns, txt, caa, dmarc] = await Promise.all([ 123 q(domain, 'A'), q(domain, 'AAAA'), q(domain, 'MX'), q(domain, 'NS'), q(domain, 'TXT'), q(domain, 'CAA'), q(`_dmarc.${domain}`, 'TXT'), 124 ]); 125 const arr = (v) => (Array.isArray(v) ? v : []); 126 const txts = arr(txt).map(unquoteTxt); 127 const spf = txts.find((t) => /^v=spf1/i.test(t)) || null; 128 const dmarcRec = arr(dmarc).map(unquoteTxt).find((t) => /^v=DMARC1/i.test(t)) || null; 129 const errors = Object.entries({ a, aaaa, mx, ns, txt, caa, dmarc }).filter(([, v]) => v && v.error).map(([k, v]) => `${k}: ${v.error}`); 130 return { 131 a: arr(a), aaaa: arr(aaaa), 132 mx: arr(mx).map((m) => { const [p, h] = String(m).split(/\s+/); return { priority: Number(p), host: (h || '').replace(/\.$/, '') }; }).sort((x, y) => x.priority - y.priority), 133 ns: arr(ns).map((n) => String(n).replace(/\.$/, '').toLowerCase()), 134 txtCount: txts.length, 135 spf, hasSpf: Boolean(spf), 136 dmarc: dmarcRec, hasDmarc: Boolean(dmarcRec), dmarcPolicy: dmarcRec?.match(/;\s*p=(\w+)/i)?.[1]?.toLowerCase() ?? null, 137 caa: arr(caa), 138 resolves: arr(a).length > 0 || arr(aaaa).length > 0, 139 errors, 140 }; 141} 142 143// ---------------- TLS certificate ---------------- 144export function sslCheck(host, { port = 443, timeoutMs = 10000, now = Date.now() } = {}) { 145 return new Promise((resolve) => { 146 let done = false; 147 const finish = (v) => { if (!done) { done = true; resolve(v); } }; 148 const socket = tls.connect({ host, port, servername: host, rejectUnauthorized: false, timeout: timeoutMs }, () => { 149 const c = socket.getPeerCertificate(false); 150 const validTo = c.valid_to ? Date.parse(c.valid_to) : null; 151 const validFrom = c.valid_from ? Date.parse(c.valid_from) : null; 152 const sans = String(c.subjectaltname || '').split(',').map((s) => s.trim().replace(/^DNS:/, '')).filter(Boolean); 153 finish({ 154 host, 155 valid: socket.authorized, 156 error: socket.authorized ? null : String(socket.authorizationError || 'Untrusted certificate'), 157 protocol: socket.getProtocol(), 158 subject: c.subject?.CN ?? null, 159 issuer: c.issuer?.O || c.issuer?.CN || null, 160 validFrom: validFrom ? new Date(validFrom).toISOString() : null, 161 validTo: validTo ? new Date(validTo).toISOString() : null, 162 daysUntilExpiry: validTo ? daysBetween(now, validTo) : null, 163 sanCount: sans.length, 164 coversHost: sans.some((s) => s === host || (s.startsWith('*.') && host.endsWith(s.slice(1)) && host.split('.').length === s.split('.').length)), 165 serialNumber: c.serialNumber ?? null, 166 }); 167 socket.end(); 168 }); 169 socket.on('timeout', () => { socket.destroy(); finish({ host, valid: false, error: `TLS timeout after ${timeoutMs / 1000}s` }); }); 170 socket.on('error', (e) => finish({ host, valid: false, error: e.code ? `${e.code}: ${e.message}` : e.message })); 171 }); 172} 173 174// ---------------- HTTPS reachability / redirects ---------------- 175export async function httpCheck(domain, { timeoutMs = 10000, maxRedirects = 10, fetchImpl = fetch, startUrl } = {}) { 176 const follow = async (startAt) => { 177 let url = startAt; 178 const chain = []; 179 const t0 = Date.now(); 180 for (let i = 0; i <= maxRedirects; i++) { 181 const ctrl = new AbortController(); const t = setTimeout(() => ctrl.abort(), timeoutMs); 182 try { 183 const res = await fetchImpl(url, { redirect: 'manual', signal: ctrl.signal, headers: { 'user-agent': UA } }); 184 await res.body?.cancel().catch(() => {}); 185 chain.push({ url, status: res.status }); 186 const loc = res.headers.get('location'); 187 if (res.status >= 300 && res.status < 400 && loc) { url = new URL(loc, url).href; continue; } 188 return { 189 finalUrl: url, finalStatus: res.status, redirectCount: chain.length - 1, redirectChain: chain, 190 hsts: res.headers.get('strict-transport-security') || null, 191 server: res.headers.get('server') || null, responseTimeMs: Date.now() - t0, error: null, 192 }; 193 } catch (e) { 194 return { finalUrl: url, finalStatus: null, redirectCount: Math.max(0, chain.length - 1), redirectChain: chain, hsts: null, server: null, responseTimeMs: Date.now() - t0, error: e.name === 'AbortError' ? `Timeout after ${timeoutMs / 1000}s` : (e.cause?.code || e.message), failedAtStart: chain.length === 0 }; 195 } finally { clearTimeout(t); } 196 } 197 return { finalUrl: url, finalStatus: null, redirectCount: chain.length, redirectChain: chain, hsts: null, server: null, responseTimeMs: Date.now() - t0, error: 'Too many redirects' }; 198 }; 199 const httpUrl = startUrl || `http://${domain}/`; 200 let r = await follow(httpUrl); 201 let httpPortReachable = !r.failedAtStart; 202 if (r.failedAtStart && !startUrl) { 203 // Port 80 not reachable: check whether the site still works over HTTPS. 204 const viaHttps = await follow(`https://${domain}/`); 205 r = { ...viaHttps, httpError: r.error }; 206 } 207 delete r.failedAtStart; 208 return { ...r, httpPortReachable, httpsRedirect: httpPortReachable ? r.finalUrl.startsWith('https://') : null, servesHttps: r.finalUrl.startsWith('https://') && !r.error }; 209} 210 211/** Plain-language issues for monitoring/alerting. */ 212export function findIssues(r, { expiryWarnDays = 30 } = {}) { 213 const out = []; 214 if (r.whois?.daysUntilExpiry != null && r.whois.daysUntilExpiry < expiryWarnDays) out.push(`Domain expires in ${r.whois.daysUntilExpiry} days`); 215 if (r.whois?.registered === false) out.push('Domain appears unregistered'); 216 if (r.ssl && !r.ssl.skipped) { 217 if (r.ssl.error) out.push(`SSL problem: ${r.ssl.error}`); 218 else if (r.ssl.daysUntilExpiry != null && r.ssl.daysUntilExpiry < expiryWarnDays) out.push(`SSL certificate expires in ${r.ssl.daysUntilExpiry} days`); 219 } 220 if (r.dns) { 221 if (!r.dns.resolves) out.push('Domain does not resolve (no A/AAAA records)'); 222 if (r.dns.mx.length && !r.dns.hasSpf) out.push('Has MX records but no SPF record'); 223 if (r.dns.mx.length && !r.dns.hasDmarc) out.push('Has MX records but no DMARC record'); 224 if (r.dns.dmarcPolicy === 'none') out.push('DMARC policy is p=none (monitoring only)'); 225 } 226 if (r.http) { 227 if (r.http.error) out.push(`Website unreachable: ${r.http.error}`); 228 else { 229 if (r.http.httpPortReachable === false) out.push(`HTTP (port 80) not reachable${r.http.httpError ? ` (${r.http.httpError})` : ''}; site only works via https://`); 230 else if (r.http.httpsRedirect === false) out.push('HTTP does not redirect to HTTPS'); 231 if (r.http.finalStatus >= 400) out.push(`Website returns HTTP ${r.http.finalStatus}`); 232 } 233 } 234 return out; 235}

1import { Actor, log } from 'apify'; 2import { normalizeDomain, rdapLookup, dnsLookup, sslCheck, httpCheck, findIssues } from './checks.js'; 3 4const EVENT_NAME = 'domain-checked'; 5const ALL_CHECKS = ['whois', 'dns', 'ssl', 'http']; 6 7await Actor.init(); 8const input = (await Actor.getInput()) ?? {}; 9const { 10 domains = ['apify.com', 'crawlee.dev', 'example.com'], 11 checks = ALL_CHECKS, 12 expiryWarnDays = 30, 13 onlyWithIssues = false, 14 maxConcurrency = 10, 15} = input; 16 17const enabled = new Set((Array.isArray(checks) && checks.length ? checks : ALL_CHECKS).filter((c) => ALL_CHECKS.includes(c))); 18const invalid = []; 19const list = []; 20const seen = new Set(); 21for (const raw of domains || []) { 22 const d = normalizeDomain(typeof raw === 'string' ? raw : raw?.url); 23 if (!d) { invalid.push(raw); continue; } 24 if (!seen.has(d)) { seen.add(d); list.push({ domain: d, input: String(typeof raw === 'string' ? raw : raw?.url).trim() }); } 25} 26for (const bad of invalid) log.warning(`Skipping invalid domain "${bad}"`); 27if (!list.length) await Actor.fail('No valid domains. Examples: "example.com", "https://www.example.com/page".'); 28log.info(`Checking ${list.length} domain(s): ${[...enabled].join(', ')}`); 29 30const charging = Actor.getChargingManager(); 31const summary = { domains: list.length, invalidInputs: invalid.length, checked: 0, withIssues: 0, saved: 0 }; 32let budgetStop = false; 33 34async function checkOne({ domain, input: inputValue }) { 35 const now = Date.now(); 36 const [whois, dns, http] = await Promise.all([ 37 enabled.has('whois') ? rdapLookup(domain, { now }).catch((e) => ({ error: e.message })) : null, 38 enabled.has('dns') ? dnsLookup(domain).catch((e) => ({ error: e.message })) : null, 39 enabled.has('http') ? httpCheck(domain).catch((e) => ({ error: e.message })) : null, 40 ]); 41 let ssl = null; 42 if (enabled.has('ssl') && dns && !dns.error && dns.resolves === false && !(dns.errors || []).length) { 43 ssl = { host: domain, valid: false, error: null, skipped: 'Domain does not resolve' }; 44 } else if (enabled.has('ssl')) { 45 // Check the host the site actually serves (after redirects), falling back to apex / www. 46 const finalHost = http?.finalUrl?.startsWith('https://') ? new URL(http.finalUrl).hostname : null; 47 const hosts = [...new Set([finalHost, domain, `www.${domain}`].filter(Boolean))]; 48 for (const h of hosts) { 49 ssl = await sslCheck(h, { now }); 50 if (!ssl.error || !/ENOTFOUND|ECONNREFUSED|EAI_AGAIN|timeout/i.test(ssl.error)) break; 51 } 52 } 53 const r = { whois, dns, ssl, http }; 54 const issues = findIssues(r, { expiryWarnDays }); 55 return { 56 domain, inputValue, checkedAt: new Date(now).toISOString(), 57 issueCount: issues.length, issues, 58 registrar: whois?.registrar ?? null, 59 domainCreatedAt: whois?.createdAt ?? null, 60 domainAgeDays: whois?.domainAgeDays ?? null, 61 domainExpiresAt: whois?.expiresAt ?? null, 62 domainDaysUntilExpiry: whois?.daysUntilExpiry ?? null, 63 sslValid: ssl ? ssl.valid : null, 64 sslIssuer: ssl?.issuer ?? null, 65 sslExpiresAt: ssl?.validTo ?? null, 66 sslDaysUntilExpiry: ssl?.daysUntilExpiry ?? null, 67 hasSpf: dns?.hasSpf ?? null, 68 hasDmarc: dns?.hasDmarc ?? null, 69 dmarcPolicy: dns?.dmarcPolicy ?? null, 70 mxProvider: dns?.mx?.[0]?.host ?? null, 71 httpsRedirect: http?.httpsRedirect ?? null, 72 finalUrl: http?.finalUrl ?? null, 73 finalStatus: http?.finalStatus ?? null, 74 whois, dns, ssl, http, 75 }; 76} 77 78const queue = [...list]; 79await Promise.all(Array.from({ length: Math.min(Math.max(1, maxConcurrency), queue.length) }, async () => { 80 while (queue.length && !budgetStop) { 81 if (charging.calculateMaxEventChargeCountWithinLimit(EVENT_NAME) < 1) { budgetStop = true; log.warning('Maximum cost per run reached; stopping.'); break; } 82 const job = queue.shift(); 83 let item; 84 try { item = await checkOne(job); } catch (e) { 85 log.warning(`${job.domain}: unexpected error ${e.message}`); 86 await Actor.pushData({ domain: job.domain, inputValue: job.input, error: e.message }); // free 87 continue; 88 } 89 summary.checked++; 90 if (item.issueCount) summary.withIssues++; 91 if (onlyWithIssues && !item.issueCount) continue; 92 await Actor.pushData(item, EVENT_NAME); 93 summary.saved++; 94 log.info(`${item.domain}: ${item.issueCount ? `${item.issueCount} issue(s): ${item.issues.join('; ')}` : 'no issues'}`); 95 } 96})); 97 98summary.chargedEvents = charging.getChargedEventCount(EVENT_NAME); 99await Actor.setValue('SUMMARY', summary); 100await Actor.setStatusMessage(`Checked ${summary.checked}/${list.length} domain(s); ${summary.withIssues} with issues.`, { isStatusMessageTerminal: true }); 101await Actor.exit();

{"objectClassName":"domain","handle":"1557856354_DOMAIN_COM-VRSN","ldhName":"APIFY.COM","links":[{"value":"https:\/\/rdap.verisign.com\/com\/v1\/domain\/apify.com","rel":"self","href":"https:\/\/rdap.verisign.com\/com\/v1\/domain\/apify.com","type":"application\/rdap+json"},{"value":"https:\/\/rdap.verisign.com\/com\/v1\/domain\/apify.com","rel":"related","href":"https:\/\/rdap.registrar.amazon.com\/rdap\/domain\/APIFY.COM","type":"application\/rdap+json"}],"status":["client transfer prohibited"],"entities":[{"objectClassName":"entity","handle":"468","roles":["registrar"],"links":[{"href":"http:\/\/registrar.amazon.com","type":"text\/html","value":"https:\/\/rdap.registrar.amazon.com\/rdap\/","rel":"about"}],"publicIds":[{"type":"IANA Registrar ID","identifier":"468"}],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","Amazon Registrar, Inc."]]],"entities":[{"objectClassName":"entity","roles":["abuse"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text",""],["tel",{"type":"voice"},"uri","tel:+1.2024422253"],["email",{},"text","trustandsafety@support.aws.com"]]]}]}],"events":[{"eventAction":"registration","eventDate":"2009-06-02T17:14:10Z"},{"eventAction":"expiration","eventDate":"2035-06-02T17:14:10Z"},{"eventAction":"last changed","eventDate":"2026-05-16T16:53:04Z"},{"eventAction":"last update of RDAP database","eventDate":"2026-10-10T17:36:34Z"}],"secureDNS":{"delegationSigned":true,"dsData":[{"keyTag":54503,"algorithm":13,"digestType":2,"digest":"8CD6DDFCBF5D80AF2EADF65F6F9052DEE867B01024021BCDAE64C30F18AF3CE7"}]},"nameservers":[{"objectClassName":"nameserver","ldhName":"NS-1225.AWSDNS-25.ORG"},{"objectClassName":"nameserver","ldhName":"NS-1928.AWSDNS-49.CO.UK"},{"objectClassName":"nameserver","ldhName":"NS-449.AWSDNS-56.COM"},{"objectClassName":"nameserver","ldhName":"NS-839.AWSDNS-40.NET"}],"rdapConformance":["rdap_level_0","icann_rdap_technical_implementation_guide_1","icann_rdap_response_profile_1"],"notices":[{"title":"Terms of Service","description":["Service subject to Terms of Use."],"links":[{"href":"https:\/\/www.verisign.com\/domain-names\/registration-data-access-protocol\/terms-service\/index.xhtml","type":"text\/html","value":"https:\/\/rdap.verisign.com\/com\/v1\/domain\/apify.com","rel":"terms-of-service"}]},{"title":"Status Codes","description":["For more information on domain status codes, please visit https:\/\/icann.org\/epp"],"links":[{"href":"https:\/\/icann.org\/epp","type":"text\/html","value":"https:\/\/rdap.verisign.com\/com\/v1\/domain\/apify.com","rel":"glossary"}]},{"title":"RDDS Inaccuracy Complaint Form","description":["URL of the ICANN RDDS Inaccuracy Complaint Form: https:\/\/icann.org\/wicf"],"links":[{"href":"https:\/\/icann.org\/wicf","type":"text\/html","value":"https:\/\/rdap.verisign.com\/com\/v1\/domain\/apify.com","rel":"help"}]}]}

Bulk WHOIS, DNS & SSL Expiry Checker: Domain Health