Domain WHOIS & DNS Lookup — Bulk RDAP, SPF/DMARC, SSL Expiry

Bulk domain intelligence: registrar, creation and expiry dates, domain age, status and DNSSEC via RDAP (modern WHOIS), plus A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records, parsed SPF and DMARC, SSL certificate expiry and availability. Paste domains, URLs or emails. $1 per 1,000 domains.

Bulk domain intelligence in one row per domain. Paste domains, website URLs or email addresses (each is reduced to its registrable domain and deduplicated) and get registration data from the registry's RDAP service, the modern replacement for WHOIS: registrar and IANA ID, creation, update and expiry dates, domain age and days to expiry, EPP status codes, nameservers and DNSSEC. Each row also has DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA, CAA) with SPF and DMARC parsed into fields (policy, all qualifier, includes, lookup count, report addresses), the SSL certificate on port 443 (issuer, valid from/to, days to expiry, SAN count, trusted or not) and an availability check (registered true/false from RDAP and NXDOMAIN). Use it to monitor domain and certificate expiry across a portfolio, audit email deliverability (SPF/DMARC) for lead lists, enrich CRM records with company domain age and hosting, spot newly registered or lookalike domains for fraud and brand protection, or check which names are free. Simple pricing: $1 per 1,000 domains, with no compute bill on top. Invalid inputs, duplicates and failed lookups are never charged.

What data does it return?

Every run outputs clean, schema-validated rows like these:

domain	registered	registrar	createdAt	expiresAt	domainAgeDays	dnssec	spf.all	dmarc.policy	ssl.daysToExpiry
example.com	true	RESERVED-Internet Assigned Numbers Authority	1995-08-14	2027-08-13	11387	true	-all	reject	68
bbc.co.uk	true	British Broadcasting Corporation	1994-12-13	2034-12-13	11632	false	~all	reject	97
google.dev	true	MarkMonitor Inc.	2018-06-13	2027-06-13	3048	false	-all	quarantine	63
zq8x7k2m9vplw4unregistered.com	false

How much does it cost?

Transparent pay-per-event pricing — you only pay for what you get, and the actor always respects your run budget: set a maximum total charge and it stops cleanly at the cap instead of overrunning.

Event	Price	Charged	Worked example
domain-result	$0.001	per domain looked up and delivered (RDAP, DNS, SPF/DMARC, SSL and availability all included)	1,000 domains = $1.00
apify-actor-start	$0.00005	per run per GB of memory (platform start fee)	One run at up to 1 GB = $0.00005 (charged as one event)

Input options

Field	Type	Required	Default	Description
domains	array	yes	—	Domains to look up — bare domains, URLs or email addresses (each is reduced to its registrable domain, e.g. https://www.shop.example.co.uk/x → example.co.uk). Duplicates are removed. Up to 10,000 per run.
includeWhois	boolean	no	true	Registrar, creation/update/expiry dates, domain age, days to expiry, status codes, nameservers and DNSSEC from the registry's RDAP service (the modern replacement for WHOIS). Contact details are never returned.
includeDns	boolean	no	true	A, AAAA, MX, NS, TXT, CNAME, SOA and CAA records, plus parsed SPF and DMARC policies.
checkAvailability	boolean	no	true	Set registered = true/false: the registry has no record of the domain (RDAP 404) or it does not exist in DNS (NXDOMAIN) ⇒ likely available to register.
includeSsl	boolean	no	true	TLS certificate on port 443 (falls back to www.): issuer, valid from/to, days to expiry, number of SANs, whether it is trusted and covers the domain.

Limits & honest notes

• Privacy (GDPR): registrant, admin, tech, billing and abuse contact details (names, emails, phones, addresses, organisations) are never returned, even where the registry publishes them. Only the registrar's name and IANA ID are included.
• Registration data comes from RDAP only (no port-43 WHOIS). All gTLDs (.com, .net, .org, .dev, .app…) and many ccTLDs (.uk, .io, .de, .fr, .nl, .ch, .br, .au, .ca, .pl, .us…) are covered. TLDs without a public RDAP service (e.g. .it, .es, .eu, .jp, .co, .me) return DNS, SSL and availability only, with a warning. Some registries publish less: .de has no creation or expiry date and no registrar.
• registered: false means the registry has no record (RDAP 404) or the domain does not exist in DNS (NXDOMAIN). It is a strong hint, not a guarantee: premium, reserved or recently deleted names may still be unavailable to register.
• DNS is queried at the registrable domain only (subdomains in the input are reduced to it) through public resolvers 1.1.1.1 and 8.8.8.8. DKIM selectors are not guessed.
• RDAP servers are queried at most 2 at a time each, and rate-limit answers (HTTP 429) are retried with backoff, so very large runs on one TLD take longer. Up to 10,000 domains per run.
• Respects your run budget: set a maximum total charge and the run stops cleanly at the cap, with every delivered row charged exactly once.

Related ActorForge actors

• Tech Stack Detector
• Wayback Machine Scraper — domain history on archive.org
• SEO Audit Crawler

Changelog

• 2026-10-18 — Initial release: RDAP registration data (registrar, dates, age, expiry, status, nameservers, DNSSEC), DNS records with parsed SPF/DMARC, SSL certificate, availability check; domains, URLs and emails as input.

---

Built and maintained by ActorForge. Reliability first: every actor in the portfolio is monitored by an automated nightly self-test, and breakages are typically fixed the same day.