Domain WHOIS and DNS Lookup

Domain WHOIS and DNS Lookup puts each domain's registry record and its live DNS into one row. Next to the registrar, dates and statuses from RDAP or WHOIS, you get the A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records, the SPF record, the DMARC policy and the mail provider recognized from the MX hosts. Paste domains, URLs or email addresses and click Start. Registrant names and contacts are never returned. Registry data costs $1.00 and DNS records $0.80 per 1,000 domains on the Free plan ($0.50 and $0.40 on Business), and the $5 of monthly credit in Apify's Free plan covers about 5,000 registry lookups or 6,200 DNS lookups.

What data does it return?

Field	Description
domain, hostname, input	Registrable domain, the full hostname from your input and the input as you typed it. Registry and DNS data are both read for domain.
registrar, createdAt, expiresAt, daysUntilExpiry	Registry record from RDAP, or from WHOIS where the registry has no RDAP. The row also carries registered, statuses, nameservers, dnssec, transferredAt and lookupSource.
a, aaaa, cname	IPv4 and IPv6 addresses, and the target when the name is an alias.
mx	Mail servers as priority and exchange, lowest priority number first.
ns, soa	Nameservers as the DNS answers them, and the SOA record with the primary nameserver, serial and timers.
txt, caa	TXT records with split strings joined, and the CAA records naming the certificate authorities allowed to issue certificates.
spf	The TXT record that starts with v=spf1, or null when there is none.
dmarc, dmarcPolicy	The record published at _dmarc.<domain> and the policy from its p= tag: none, quarantine or reject.
mailProvider	Provider recognized from the MX host names: Google Workspace, Microsoft 365, Seznam.cz and 19 others, or Other. null when the domain has no MX records.
websiteResolves, hasMx	Whether the domain has an address record, and whether it has a mail server. null when no resolver answered.
subdomains, subdomainCount	With Subdomains on, up to 500 hostnames in alphabetical order and the total number found. null otherwise.
notes	What went wrong for this domain, for example DNS: name does not exist (NXDOMAIN).

How to look up WHOIS and DNS records

1. Paste your list into Domains, one per line: bare names, URLs, hostnames or email addresses. Each entry is reduced to its registrable domain and checked once, so info@seznam.cz and seznam.cz give one row.
2. Keep Registry data (WHOIS via RDAP) and DNS records on for the full row, or switch one off to pay for the other only.
3. In DNS record types, keep all eight types or narrow them, for example to A, AAAA, MX and NS. The Email setup checks option is on by default and adds the SPF, DMARC and mail provider fields at no charge.
4. Turn on Subdomains when you need the hostnames under each domain. This lookup is charged per domain.
5. Click Start. The Output tab offers Domains, Registry and DNS views, and the rows can be exported as CSV, Excel or JSON or read through the API.

For the API, an input that checks four domains and reads four record types:

{
  "domains": ["apify.com", "https://blog.github.com", "bbc.co.uk", "seznam.cz"],
  "dnsTypes": ["A", "AAAA", "MX", "NS"],
  "emailChecks": true,
  "includeSubdomains": false
}

Example output

One row from a run on 28 September 2026 with the default options. The subdomain lookup was off, so subdomains and subdomainCount are null.

{
  "type": "domain",
  "key": "domain:seznam.cz",
  "input": "seznam.cz",
  "hostname": "seznam.cz",
  "domain": "seznam.cz",
  "tld": "cz",
  "publicSuffix": "cz",
  "registered": true,
  "lookupSource": "rdap",
  "rdapServer": "https://rdap.nic.cz/",
  "whoisServer": "whois.nic.cz",
  "registrar": "REG-SEZNAM",
  "registrarIanaId": null,
  "registrarUrl": null,
  "createdAt": "1996-10-07T00:00:00.000Z",
  "updatedAt": "2022-09-05T12:21:11.000Z",
  "expiresAt": "2027-10-28T22:00:00.000Z",
  "transferredAt": "2022-09-05T12:05:00.000Z",
  "domainAgeDays": 10948,
  "daysUntilExpiry": 395,
  "statuses": [
    "server transfer prohibited"
  ],
  "nameservers": [
    "ams.seznam.cz",
    "ans.seznam.cz"
  ],
  "dnssec": true,
  "a": [
    "77.75.77.222",
    "77.75.79.222"
  ],
  "aaaa": [
    "2a02:598:a::79:222",
    "2a02:598:2::1222"
  ],
  "cname": null,
  "mx": [
    {
      "priority": 10,
      "exchange": "mx1.seznam.cz"
    },
    {
      "priority": 20,
      "exchange": "mx2.seznam.cz"
    }
  ],
  "ns": [
    "ams.seznam.cz",
    "ans.seznam.cz"
  ],
  "txt": [
    "google-site-verification=v2WaAYaKuekbWHJu29R0b1IbBY2-pInEXYWbh_1_V2M",
    "v=spf1 mx ip4:77.75.78.0/23 ip4:77.75.76.0/23 ip6:2a02:598::/32 ?all",
    "google-site-verification=a9t5IHxxjmCtKh9OOuqIGQBo1JUNQC1eEzhCY7x2Lts",
    "yahoo-verification-key=rIVkIfpCmZr9Wlk/ixIMiDw3Gdv8aIr0gxXkfzWe6+Y=",
    "facebook-domain-verification=hp0jkbs2ikx5c9hv3r0cwcyvi2c2jm",
    "google-site-verification=e3xWgDmkjVzej4PsMZgvtPhUiJLFAK5rdx-zdmeBYjg"
  ],
  "soa": {
    "primaryNs": "ans.seznam.cz",
    "admin": "hostmaster.seznam.cz",
    "serial": 1790593330,
    "refresh": 900,
    "retry": 300,
    "expire": 604800,
    "minimum": 300
  },
  "caa": [
    "0 issue \"letsencrypt.org;validationmethods=dns-01\"",
    "0 iodef \"mailto:abuse-caa@firma.seznam.cz\""
  ],
  "websiteResolves": true,
  "hasMx": true,
  "mailProvider": "Seznam.cz",
  "spf": "v=spf1 mx ip4:77.75.78.0/23 ip4:77.75.76.0/23 ip6:2a02:598::/32 ?all",
  "dmarc": "v=DMARC1; p=none; sp=reject; rua=mailto:abuse@seznam.cz",
  "dmarcPolicy": "none",
  "subdomains": null,
  "subdomainCount": null,
  "checkedAt": "2026-09-28T13:19:41.107Z",
  "notes": []
}

How much does it cost to look up WHOIS and DNS records?

	Free plan	Starter	Scale	Business
1,000 domains	$1.00	$0.80	$0.65	$0.50
DNS lookup, per 1,000	$0.80	$0.64	$0.52	$0.40
Subdomain lookup, per 1,000	$5.00	$4.00	$3.25	$2.50

You pay only for the events in the table. There is no start fee, and compute time and proxies are included.

For 1,000 domains with registry data and DNS records, the Free plan charges $1.00 plus $0.80; subdomains add $5.00. The email checks are part of the DNS price. Nothing is charged for a part that got no answer (a registry that did not respond, a name no resolver answered, a failed subdomain lookup), for domains dropped by Only domains expiring within N days, or for unchanged domains in changes-only mode.

Limits

• DNS is read for the registrable domain only: for https://blog.github.com the row holds the records of github.com, and blog.github.com itself is not queried.
• DNS answers come from Cloudflare's DNS over HTTPS resolver, with Google's as the fallback. When neither answers, the DNS fields stay empty and notes says so.
• mailProvider goes by the MX host names alone. A domain that routes its mail through a filtering service is named after that service, as with Broadcom (MessageLabs) for bbc.co.uk.
• dmarcPolicy reports the p= tag only. A separate subdomain policy stays inside dmarc, as in p=none; sp=reject for seznam.cz.
• Subdomains come from the subdomain.center index of hostnames seen on the web, plus certificate transparency logs read through the Cert Spotter API when the run can search them. Cert Spotter covers unexpired certificates and allows a few domain lookups per hour, so long lists rely mostly on the index. The run's SUMMARY record notes when the logs were skipped. crt.sh is no longer queried, because its robots.txt asks automated clients to stay away.
• Norid, the .no registry, allows no automated RDAP lookups and forbids commercial use of its WHOIS answers, so .no rows carry DNS records and a note but no registrar or dates, and their registry part is not charged.
• Fields depend on what each registry publishes, so dates or the registrar's IANA number are empty for some country-code domains.
• A run returns up to 10,000 domains unless you raise Maximum rows.

Monitoring domains and mail setup

Turn on Return only domains that changed since the last run, name the list in Watch name (for example our-domains) or save it as a task, and schedule it. A domain comes back when its registrar, expiry date, statuses or nameservers changed, and also when its A, MX, NS, SPF or DMARC records did, so a mail provider switch or a relaxed DMARC policy shows up in the next run. New domains in the list are returned too. A changed or new domain that a run could not return, because it reached Maximum rows or its spending limit, is not updated in the snapshot, so it comes back in the next run. The CHANGES record gives the old and the new value of every field that moved.

FAQ

Is it legal to look up WHOIS and DNS records?

DNS records are public by design: every mail server and browser reads them. Registry data comes from the RDAP and WHOIS services that registries run for anyone to query, and the actor leaves out registrant contacts. You are responsible for how you use the results.

How is the mail provider recognized?

From the MX host names. aspmx.l.google.com means Google Workspace and github-com.mail.protection.outlook.com means Microsoft 365; 22 providers are recognized in total. Hosts that match none of them give Other, and the MX records themselves are in mx.

Why do nameservers and ns differ?

nameservers is the delegation stored at the registry, and ns is what the domain's own DNS answers. They usually list the same servers. A difference means the registry and the zone disagree, which can happen during a move between DNS providers.

Related scrapers

• WHOIS Domain Lookup
• Domain Availability Checker
• Tech Stack Detector

Support

This actor is built and maintained by deriverge s.r.o., a software company based in the Czech Republic. If a run fails or a field you need is missing, please open an issue in the Issues tab or write to us at info@deriverge.com. We respond in English and Czech. Runs can be scheduled in Apify Console or started from the API tab, which has examples for Python, JavaScript and cURL and works with Make, Zapier, n8n and the Apify MCP server. If the actor saves you time, a short review helps other people find it.