Bulk DNS & Domain Checker — Records, Mail, WHOIS & Expiry

Look up the DNS and domain details of thousands of domains at once. Paste a list and get, for each one: A/AAAA/MX/TXT/NS records, SPF/DMARC/DKIM, detected mail provider, registrar, creation & expiry dates, days-until-expiry and DNSSEC.

Fast, cheap and keyless — the DNS and domain intelligence you need for IT, email deliverability, security and domain portfolio management.

---

Why this Actor?

DNS holds the answers to a lot of important questions: does this domain resolve, where does its mail go, is SPF/DMARC set up, who is the registrar, and when does it expire? Checking one domain is easy; checking a whole portfolio or prospect list is not. This Actor does it in bulk on plain DNS + RDAP, so it's fast and inexpensive at scale.

• Domain portfolio monitoring — track expiry dates across all your domains and never miss a renewal.
• Email deliverability audits — check MX, SPF, DMARC and DKIM across a list of domains.
• Security & recon — map nameservers, mail providers and DNSSEC.
• Lead enrichment — add mail provider and registrar signals to a list of company domains.

---

What you get

One record per domain:

Field	Description
domain	The domain
resolves	Whether it resolves (has A/AAAA)
aRecords / aaaaRecords	IPv4 / IPv6 addresses
mxRecords	Mail servers (priority order)
mailProvider	Detected provider (Google Workspace, Microsoft 365…)
nsRecords	Nameservers
hasSpf / hasDmarc / hasDkim	Email-auth records present
txtRecords	TXT records
registrar	Domain registrar (via RDAP)
createdDate / expiryDate	Registration & expiry dates
daysUntilExpiry	Days until the domain expires
dnssec	Whether DNSSEC is enabled
error	Error, if the domain doesn't resolve
scrapedAt	Timestamp

---

Example output

{
  "domain": "github.com",
  "resolves": "true",
  "aRecords": "140.82.121.4",
  "mxRecords": "github-com.mail.protection.outlook.com",
  "mailProvider": "Microsoft 365",
  "nsRecords": "dns1.p08.nsone.net, dns2.p08.nsone.net",
  "hasSpf": "true",
  "hasDmarc": "true",
  "registrar": "MarkMonitor Inc.",
  "createdDate": "2007-10-09",
  "expiryDate": "2026-10-09",
  "daysUntilExpiry": "92",
  "dnssec": "false",
  "scrapedAt": "2026-07-09T15:00:00.000Z"
}

---

Input

Field	Type	Default	Description
domains	array	—	Required. Domains to check. URLs and emails are accepted too (the domain is extracted).
whoisLookup	boolean	true	Look up registrar, expiry and DNSSEC via RDAP. Turn off for a faster, DNS-only run.
maxConcurrency	integer	50	Domains checked in parallel.

DNS-only (fastest)

{ "domains": ["example.com", "github.com"], "whoisLookup": false }

Full check with WHOIS

{ "domains": ["example.com", "mysite.com"], "whoisLookup": true }

---

Use cases in detail

1. Domain expiry monitoring

Run your whole portfolio and sort by daysUntilExpiry to catch domains that need renewing — schedule it to get an ongoing watch.

2. Email deliverability audit

Check mxRecords, hasSpf, hasDmarc and mailProvider across your domains (or a client's) to find gaps that hurt deliverability.

3. Security & infrastructure recon

Map nameservers, DNSSEC and mail providers across a set of domains for an infrastructure overview.

4. Lead enrichment

Add mailProvider and registrar to a list of company domains as B2B signals.

---

How to use it

1. Click Try for free.
2. Paste your domains.
3. Click Start.
4. Export as JSON, CSV, Excel, or via the Apify API.

DNS is very fast; enabling WHOIS adds a lookup per domain, so DNS-only runs are quickest on huge lists.

---

Calling from the API

curl -X POST "https://api.apify.com/v2/acts/YOUR_ACTOR_ID/runs?token=YOUR_APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "domains": ["github.com", "example.com"], "whoisLookup": true }'

Then fetch the dataset (JSON/CSV):

$curl "https://api.apify.com/v2/acts/YOUR_ACTOR_ID/runs/last/dataset/items?token=YOUR_APIFY_TOKEN&format=csv"

---

Frequently asked questions

What records does it check? A, AAAA, MX, NS and TXT, plus SPF/DMARC/DKIM detection — and, with WHOIS on, registrar, creation/expiry dates and DNSSEC.

Why is the registrar/expiry sometimes empty? Registrar data comes from RDAP, and not every TLD publishes RDAP yet (many newer TLDs don't). DNS fields are always populated when the domain resolves.

Can I pass URLs or emails instead of bare domains? Yes — the domain is extracted automatically (e.g. https://www.site.com/page and user@site.com both become site.com).

How many domains can it handle? Thousands to millions. DNS-only is fastest; WHOIS adds an RDAP request per domain.

How is the mail provider detected? From the MX host (e.g. *.protection.outlook.com → Microsoft 365, aspmx.l.google.com → Google Workspace).

---

Tips

• Turn off whoisLookup for the fastest possible run on huge lists (DNS-only).
• Sort by daysUntilExpiry for renewal monitoring.
• Filter hasSpf / hasDmarc = false to find email-auth gaps.

---

Notes

This Actor performs public DNS and RDAP lookups on the domains you provide. It reads publicly available records only. Use on domains you have a legitimate reason to check.

---

Support

Want CAA/SRV records, blacklist checks, or SSL certificate details? Open an issue from the Actor's page.