# Domain WHOIS & DNS Lookup — Bulk RDAP, SPF/DMARC, SSL Expiry (`actor-forge/domain-lookup`) Actor

Bulk domain intelligence: registrar, creation and expiry dates, domain age, status and DNSSEC via RDAP (modern WHOIS), plus A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records, parsed SPF and DMARC, SSL certificate expiry and availability. Paste domains, URLs or emails. $1 per 1,000 domains.

- **URL**: https://apify.com/actor-forge/domain-lookup.md
- **Developed by:** [ActorForge](https://apify.com/actor-forge) (community)
- **Categories:** Developer tools, SEO tools, Lead generation
- **Security:** Limited permissions
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $1.00 / 1,000 domain results

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Domain WHOIS & DNS Lookup — Bulk RDAP, SPF/DMARC, SSL Expiry

Bulk domain intelligence: registrar, creation and expiry dates, domain age, status and DNSSEC via RDAP (modern WHOIS), plus A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records, parsed SPF and DMARC, SSL certificate expiry and availability. Paste domains, URLs or emails. $1 per 1,000 domains.

**Bulk domain intelligence in one row per domain.** Paste domains, website URLs or email addresses (each is reduced to its registrable domain and deduplicated) and get **registration data** from the registry's RDAP service, the modern replacement for WHOIS: **registrar** and IANA ID, **creation, update and expiry dates**, **domain age** and **days to expiry**, EPP status codes, nameservers and **DNSSEC**. Each row also has **DNS records** (A, AAAA, MX, NS, TXT, CNAME, SOA, CAA) with **SPF and DMARC parsed into fields** (policy, `all` qualifier, includes, lookup count, report addresses), the **SSL certificate** on port 443 (issuer, valid from/to, days to expiry, SAN count, trusted or not) and an **availability check** (`registered` true/false from RDAP and NXDOMAIN). Use it to **monitor domain and certificate expiry** across a portfolio, audit **email deliverability** (SPF/DMARC) for lead lists, enrich CRM records with company domain age and hosting, spot **newly registered or lookalike domains** for fraud and brand protection, or check which names are free. **Simple pricing: $1 per 1,000 domains**, with no compute bill on top. Invalid inputs, duplicates and failed lookups are never charged.

### What data does it return?

Every run outputs clean, schema-validated rows like these:

| domain | registered | registrar | createdAt | expiresAt | domainAgeDays | dnssec | spf.all | dmarc.policy | ssl.daysToExpiry |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| example.com | true | RESERVED-Internet Assigned Numbers Authority | 1995-08-14 | 2027-08-13 | 11387 | true | -all | reject | 68 |
| bbc.co.uk | true | British Broadcasting Corporation | 1994-12-13 | 2034-12-13 | 11632 | false | ~all | reject | 97 |
| google.dev | true | MarkMonitor Inc. | 2018-06-13 | 2027-06-13 | 3048 | false | -all | quarantine | 63 |
| zq8x7k2m9vplw4unregistered.com | false |  |  |  |  |  |  |  |  |

### How much does it cost?

Transparent pay-per-event pricing — you only pay for what you get, and the
actor **always respects your run budget**: set a maximum total charge and it
stops cleanly at the cap instead of overrunning.

| Event | Price | Charged | Worked example |
| --- | --- | --- | --- |
| `domain-result` | $0.001 | per domain looked up and delivered (RDAP, DNS, SPF/DMARC, SSL and availability all included) | 1,000 domains = $1.00 |
| `apify-actor-start` | $0.00005 | per run per GB of memory (platform start fee) | One run at up to 1 GB = $0.00005 (charged as one event) |

### Input options

| Field | Type | Required | Default | Description |
| --- | --- | --- | --- | --- |
| `domains` | array | yes | — | Domains to look up — bare domains, URLs or email addresses (each is reduced to its registrable domain, e.g. https://www.shop.example.co.uk/x → example.co.uk). Duplicates are removed. Up to 10,000 per run. |
| `includeWhois` | boolean | no | `true` | Registrar, creation/update/expiry dates, domain age, days to expiry, status codes, nameservers and DNSSEC from the registry's RDAP service (the modern replacement for WHOIS). Contact details are never returned. |
| `includeDns` | boolean | no | `true` | A, AAAA, MX, NS, TXT, CNAME, SOA and CAA records, plus parsed SPF and DMARC policies. |
| `checkAvailability` | boolean | no | `true` | Set registered = true/false: the registry has no record of the domain (RDAP 404) or it does not exist in DNS (NXDOMAIN) ⇒ likely available to register. |
| `includeSsl` | boolean | no | `true` | TLS certificate on port 443 (falls back to www.): issuer, valid from/to, days to expiry, number of SANs, whether it is trusted and covers the domain. |

### Limits & honest notes

- Privacy (GDPR): registrant, admin, tech, billing and abuse contact details (names, emails, phones, addresses, organisations) are never returned, even where the registry publishes them. Only the registrar's name and IANA ID are included.
- Registration data comes from RDAP only (no port-43 WHOIS). All gTLDs (.com, .net, .org, .dev, .app…) and many ccTLDs (.uk, .io, .de, .fr, .nl, .ch, .br, .au, .ca, .pl, .us…) are covered. TLDs without a public RDAP service (e.g. .it, .es, .eu, .jp, .co, .me) return DNS, SSL and availability only, with a warning. Some registries publish less: .de has no creation or expiry date and no registrar.
- `registered: false` means the registry has no record (RDAP 404) or the domain does not exist in DNS (NXDOMAIN). It is a strong hint, not a guarantee: premium, reserved or recently deleted names may still be unavailable to register.
- DNS is queried at the registrable domain only (subdomains in the input are reduced to it) through public resolvers 1.1.1.1 and 8.8.8.8. DKIM selectors are not guessed.
- RDAP servers are queried at most 2 at a time each, and rate-limit answers (HTTP 429) are retried with backoff, so very large runs on one TLD take longer. Up to 10,000 domains per run.
- Respects your run budget: set a maximum total charge and the run stops cleanly at the cap, with every delivered row charged exactly once.

### Related ActorForge actors

- [Tech Stack Detector](https://apify.com/actor-forge/tech-stack-detector)
- [Wayback Machine Scraper](https://apify.com/actor-forge/wayback-snapshots) — domain history on archive.org
- [SEO Audit Crawler](https://apify.com/actor-forge/seo-audit)

### Changelog

- **2026-10-18** — Initial release: RDAP registration data (registrar, dates, age, expiry, status, nameservers, DNSSEC), DNS records with parsed SPF/DMARC, SSL certificate, availability check; domains, URLs and emails as input.

***

*Built and maintained by **ActorForge**. Reliability first: every actor in the
portfolio is monitored by an automated nightly self-test, and breakages are
typically fixed the same day.*

# Actor input Schema

## `domains` (type: `array`):

Domains to look up — bare domains, URLs or email addresses (each is reduced to its registrable domain, e.g. https://www.shop.example.co.uk/x → example.co.uk). Duplicates are removed. Up to 10,000 per run.

## `includeWhois` (type: `boolean`):

Registrar, creation/update/expiry dates, domain age, days to expiry, status codes, nameservers and DNSSEC from the registry's RDAP service (the modern replacement for WHOIS). Contact details are never returned.

## `includeDns` (type: `boolean`):

A, AAAA, MX, NS, TXT, CNAME, SOA and CAA records, plus parsed SPF and DMARC policies.

## `checkAvailability` (type: `boolean`):

Set registered = true/false: the registry has no record of the domain (RDAP 404) or it does not exist in DNS (NXDOMAIN) ⇒ likely available to register.

## `includeSsl` (type: `boolean`):

TLS certificate on port 443 (falls back to www.): issuer, valid from/to, days to expiry, number of SANs, whether it is trusted and covers the domain.

## Actor input object example

```json
{
  "domains": [
    "example.com",
    "bbc.co.uk",
    "https://www.notion.so/product",
    "info@apify.com"
  ],
  "includeWhois": true,
  "includeDns": true,
  "checkAvailability": true,
  "includeSsl": true
}
```

# Actor output Schema

## `results` (type: `string`):

One row per domain with registration data, DNS records, SPF/DMARC, SSL certificate and availability.

## `summary` (type: `string`):

Domains delivered, invalid inputs and failed lookups (none of them charged).

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "domains": [
        "example.com",
        "bbc.co.uk",
        "https://www.notion.so/product",
        "info@apify.com"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("actor-forge/domain-lookup").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "domains": [
        "example.com",
        "bbc.co.uk",
        "https://www.notion.so/product",
        "info@apify.com",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("actor-forge/domain-lookup").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "domains": [
    "example.com",
    "bbc.co.uk",
    "https://www.notion.so/product",
    "info@apify.com"
  ]
}' |
apify call actor-forge/domain-lookup --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,actor-forge/domain-lookup"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/OpOs84WRHAI7Btld1/builds/k50jBCX6OMcqcyIUE/openapi.json