Bulk WHOIS Lookup & Tech Stack — DMARC, SSL | $0.005/domain
Pricing
from $4.00 / 1,000 domain reports
One audit-ready row per domain: DNS records, SPF, DMARC and DKIM, mail provider, TLS expiry, registrar, hosting IP, ASN, CDN and detected tech stack. No API keys needed. Export to CSV, JSON or Excel.
domain
Required
The registrable host name that was analysed, lower-case, punycode, without a leading www..
url
Required
Homepage URL of the domain (https:///).
status
Required
ok = the domain resolved and was probed; not_found = NXDOMAIN, the domain does not exist; error = the lookups failed (see error).
error
Optional
Human-readable reason when status is not_found or error. Absent on ok rows.
scrapedAt
Required
ISO 8601 timestamp of the probe.
cms
Optional
Primary CMS, hosted commerce platform or site generator detected on the homepage (WordPress, Shopify, Next.js, ...). Null when no fingerprint matched.
cdn
Optional
CDN or edge network in front of the site (Cloudflare, Fastly, Akamai, Vercel, ...), from response headers first and the hosting ASN second. Null when none was detected.
mailProvider
Optional
Hosted mail provider derived from the MX records (Google Workspace, Microsoft 365, Zoho Mail, Proofpoint, ...), other when MX exists but is unknown or self-hosted, null when the domain has no MX.
dmarcPolicy
Optional
DMARC policy of the domain: none, quarantine or reject. Null when no DMARC record is published.
tlsDaysToExpiry
Optional
Whole days until the TLS certificate expires; negative when it has already expired. Null when no certificate could be fetched.
registrar
Optional
Sponsoring registrar from RDAP. Null when the registry publishes no RDAP record for this TLD.
dns
Optional
DNS records: a, aaaa (arrays of IPs), mx (priority + exchange), ns, txt (raw strings), caa (flags, tag, value).
emailSecurity
Optional
Email authentication posture: spf (present, record, allMechanism, includes), dmarc (present, record, policy, subdomainPolicy, percentage, reportingEnabled) and dkimSelectorsFound.
tls
Optional
TLS certificate of the apex (or www) host: issuer, issuerCn, subject, validFrom, validTo, daysToExpiry, sanCount, protocol, trusted, host.
rdap
Optional
Registration data: registrar, registrarIanaId, createdAt, updatedAt, expiresAt, nameservers, status (EPP flags) and the source RDAP server. Registrant, admin and technical contacts are never included.
hosting
Optional
Where the domain is hosted: ip (first A record), asn, asnName, cdn and dnsProvider.
techStack
Optional
Homepage fingerprints: server, poweredBy, cms, analytics, frameworks, ecommerce, chatWidgets, other, plus homepageStatus, homepageUrl and title.
files
Optional
Well-known files: robotsTxt, llmsTxt, securityTxt, sitemap (booleans), sitemapUrls from robots.txt and aiBotsBlocked (AI crawlers fully disallowed).
warnings
Optional
Non-fatal problems on an ok row, e.g. a ccTLD without RDAP or a homepage that refused the request. Absent when everything worked.
