Domain Intelligence - Bulk RDAP WHOIS, DNS, SSL & Availability

Domain Intelligence – Bulk RDAP (WHOIS) Lookup, DNS, SPF/DMARC, SSL Expiry & Availability

Check hundreds of domains in seconds. For every domain you get registration data from the official registry (registrar, creation and expiry dates, EPP status, nameservers, DNSSEC), all key DNS records (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA), parsed SPF and DMARC email-security policies, the live SSL/TLS certificate (issuer, validity, days to expiry, SANs, trust status), and an availability verdict – all in one row, ready for CSV, Excel, JSON or API.

Registration data comes from RDAP, the modern, structured successor to WHOIS, using the official IANA bootstrap registry to find each TLD's authoritative server. No WHOIS scraping, no API keys.

What can I use it for?

• 📅 Domain portfolio & SSL expiry monitoring – schedule a daily run and alert before domains or certificates expire.
• ✉️ Email deliverability audits – find domains missing SPF, DMARC or MX records, or using p=none.
• 🛡️ Security & brand protection – inventory nameservers, registrars, CAA records and certificate issuers across lookalike domains.
• 🔎 Lead enrichment & sales intelligence – enrich company domain lists with hosting/email provider (MX, NS) and domain age.
• 🛒 Domain investing – check availability and expiry dates of name lists in bulk.

Features

• RDAP via IANA bootstrap for every gTLD and many ccTLDs; follows registrar referrals for thin registries (.com/.net)
• Privacy-safe: registrant, admin and tech contact details are never returned – only the registrar and which contact roles exist
• DNS via public resolvers (Cloudflare, Google, Quad9), SPF + DMARC parsing
• SSL certificate details even when the certificate is invalid (with the validation error)
• Availability: authoritative from the registry (RDAP 404), with a DNS fallback for TLDs without RDAP (availabilitySource tells you which)
• Accepts URLs and IDNs, de-duplicates, strips www.; per-domain errors; you pay only for successful checks

How to check domains in bulk

1. Paste your domains (or full URLs) into Domains – one per line, any mix of TLDs.
2. Keep RDAP, DNS and SSL switched on, or turn off what you don't need.
3. Click Start. Domains are checked in parallel; lower maxConcurrency for very large lists on one TLD.
4. Download the results as CSV, Excel or JSON, or pull them through the Apify API.
5. Optional: add a schedule (daily or weekly) and an integration (Slack, email, webhook) to get alerted before domains or SSL certificates expire.

Input example

{ "domains": ["apify.com", "example.com", "my-new-startup-idea.com"], "checkRdap": true, "checkDns": true, "checkSsl": true }

Output example

One dataset item per domain (real output, trimmed):

{
  "domain": "takealot.com",
  "status": "succeeded",
  "available": false,
  "availabilitySource": "rdap",
  "summary": {
    "registrar": "GoDaddy.com, LLC",
    "createdAt": "2011-06-01T16:11:28Z",
    "expiresAt": "2029-06-01T16:11:28Z",
    "sslIssuer": "GoDaddy.com, Inc.",
    "sslDaysToExpiry": 47,
    "sslTrusted": true,
    "spf": "v=spf1 redirect=_sljmh4rts.sdmarc.net",
    "dmarcPolicy": "quarantine",
    "mx": "aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com",
    "nameservers": "gordon.ns.cloudflare.com, lia.ns.cloudflare.com"
  },
  "registration": {
    "registrar": "GoDaddy.com, LLC",
    "registrarIanaId": "146",
    "createdAt": "2011-06-01T16:11:28Z",
    "expiresAt": "2029-06-01T16:11:28Z",
    "status": [
      "client delete prohibited",
      "client renew prohibited",
      "client transfer prohibited",
      "client update prohibited"
    ],
    "nameservers": [
      "gordon.ns.cloudflare.com",
      "lia.ns.cloudflare.com"
    ],
    "dnssec": false,
    "contactsRedacted": true
  },
  "dns": {
    "records": {
      "A": [
        "104.16.71.64",
        "104.16.72.64"
      ],
      "MX": [
        {
          "exchange": "aspmx.l.google.com",
          "priority": 1
        },
        {
          "exchange": "alt1.aspmx.l.google.com",
          "priority": 5
        },
        {
          "exchange": "alt2.aspmx.l.google.com",
          "priority": 5
        },
        {
          "exchange": "aspmx2.googlemail.com",
          "priority": 10
        },
        {
          "exchange": "aspmx3.googlemail.com",
          "priority": 10
        }
      ],
      "NS": [
        "gordon.ns.cloudflare.com",
        "lia.ns.cloudflare.com"
      ]
    },
    "email": {
      "spf": "v=spf1 redirect=_sljmh4rts.sdmarc.net",
      "dmarc": "v=DMARC1; p=quarantine; rua=mailto:a.ljmh4rts@sdmarc.net,mailto:postmaster@takealot.com; ruf=mailto:postmaster@takealot.com; adkim=r; aspf=r",
      "dmarcPolicy": "quarantine",
      "hasMx": true,
      "nullMx": false
    }
  },
  "ssl": {
    "valid": true,
    "issuer": "GoDaddy.com, Inc.",
    "validTo": "2026-12-04T12:13:26.000Z",
    "daysToExpiry": 47,
    "sans": [
      "*.takealot.com",
      "takealot.com"
    ],
    "protocol": "TLSv1.3"
  }
}

The Overview view shows registrar, dates, nameservers, MX, SSL expiry, SPF and DMARC side by side.

How much does it cost?

Pay per event: $0.002 per domain checked – RDAP, DNS and SSL included.

Domains checked	Price
100	$0.20
1,000	$2.00
10,000	$20.00

No extra platform usage charges. Invalid or failed domains are free. Set a maximum cost per run and the Actor stops cleanly when it is reached.

FAQ

Can I check domain expiry dates in bulk? Yes – that's the main use. Every row has expiresAt from the registry and sslDaysToExpiry from the live certificate; sort or filter on them in the CSV, or schedule the Actor and send the results to Slack or email.

Can I use it from code or AI agents? Yes. Call it through the Apify API, the JavaScript or Python client, or the Apify MCP server, and read the dataset as JSON.

Is RDAP the same as WHOIS? RDAP is the IETF standard that replaces WHOIS, with JSON responses and the same registry data. ICANN requires it for all gTLDs.

Why is available null for some domains? Some ccTLDs (for example .de or .io) don't publish RDAP yet. We then fall back to DNS; if the domain has no nameservers and returns NXDOMAIN it is marked likely available – always confirm with a registrar before buying.

Why don't I see the owner's name or email? By design. Registrant contact data is personal data; we don't collect or store it. Most registries redact it anyway (GDPR).

I'm getting RDAP 429 errors. Some registries rate-limit. Lower maxConcurrency (e.g. 3) for large lists from the same TLD.