# Domain Intelligence - Bulk RDAP WHOIS, DNS, SSL & Availability (`jeanswiegers/domain-intelligence`) Actor

Bulk domain lookup in one run: RDAP registration data (registrar, creation & expiry dates, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CAA), SPF & DMARC, SSL certificate expiry and SANs, and availability. Privacy-safe, no WHOIS scraping.

- **URL**: https://apify.com/jeanswiegers/domain-intelligence.md
- **Developed by:** [Jean Swiegers](https://apify.com/jeanswiegers) (community)
- **Categories:** Developer tools, SEO tools, Lead generation
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

$2.00 / 1,000 domain checkeds

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Domain Intelligence – Bulk RDAP (WHOIS) Lookup, DNS, SPF/DMARC, SSL Expiry & Availability

**Check hundreds of domains in seconds.** For every domain you get registration data from the official registry (registrar, creation and expiry dates, EPP status, nameservers, DNSSEC), all key **DNS records** (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA), parsed **SPF and DMARC** email-security policies, the live **SSL/TLS certificate** (issuer, validity, days to expiry, SANs, trust status), and an **availability** verdict – all in one row, ready for CSV, Excel, JSON or API.

Registration data comes from **RDAP**, the modern, structured successor to WHOIS, using the official IANA bootstrap registry to find each TLD's authoritative server. **No WHOIS scraping, no API keys.**

### What can I use it for?

- 📅 **Domain portfolio & SSL expiry monitoring** – schedule a daily run and alert before domains or certificates expire.
- ✉️ **Email deliverability audits** – find domains missing SPF, DMARC or MX records, or using `p=none`.
- 🛡️ **Security & brand protection** – inventory nameservers, registrars, CAA records and certificate issuers across lookalike domains.
- 🔎 **Lead enrichment & sales intelligence** – enrich company domain lists with hosting/email provider (MX, NS) and domain age.
- 🛒 **Domain investing** – check availability and expiry dates of name lists in bulk.

### Features

- RDAP via **IANA bootstrap** for every gTLD and many ccTLDs; follows registrar referrals for thin registries (.com/.net)
- **Privacy-safe:** registrant, admin and tech contact details are never returned – only the registrar and which contact roles exist
- DNS via public resolvers (Cloudflare, Google, Quad9), SPF + DMARC parsing
- SSL certificate details even when the certificate is invalid (with the validation error)
- Availability: authoritative from the registry (RDAP 404), with a DNS fallback for TLDs without RDAP (`availabilitySource` tells you which)
- Accepts URLs and IDNs, de-duplicates, strips `www.`; per-domain errors; you pay only for successful checks

### Input example

```json
{ "domains": ["apify.com", "example.com", "my-new-startup-idea.com"], "checkRdap": true, "checkDns": true, "checkSsl": true }
```

### Output example

One dataset item per domain (real output, trimmed):

```json
{
  "domain": "takealot.com",
  "status": "succeeded",
  "available": false,
  "availabilitySource": "rdap",
  "summary": {
    "registrar": "GoDaddy.com, LLC",
    "createdAt": "2011-06-01T16:11:28Z",
    "expiresAt": "2029-06-01T16:11:28Z",
    "sslIssuer": "GoDaddy.com, Inc.",
    "sslDaysToExpiry": 47,
    "sslTrusted": true,
    "spf": "v=spf1 redirect=_sljmh4rts.sdmarc.net",
    "dmarcPolicy": "quarantine",
    "mx": "aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com",
    "nameservers": "gordon.ns.cloudflare.com, lia.ns.cloudflare.com"
  },
  "registration": {
    "registrar": "GoDaddy.com, LLC",
    "registrarIanaId": "146",
    "createdAt": "2011-06-01T16:11:28Z",
    "expiresAt": "2029-06-01T16:11:28Z",
    "status": [
      "client delete prohibited",
      "client renew prohibited",
      "client transfer prohibited",
      "client update prohibited"
    ],
    "nameservers": [
      "gordon.ns.cloudflare.com",
      "lia.ns.cloudflare.com"
    ],
    "dnssec": false,
    "contactsRedacted": true
  },
  "dns": {
    "records": {
      "A": [
        "104.16.71.64",
        "104.16.72.64"
      ],
      "MX": [
        {
          "exchange": "aspmx.l.google.com",
          "priority": 1
        },
        {
          "exchange": "alt1.aspmx.l.google.com",
          "priority": 5
        },
        {
          "exchange": "alt2.aspmx.l.google.com",
          "priority": 5
        },
        {
          "exchange": "aspmx2.googlemail.com",
          "priority": 10
        },
        {
          "exchange": "aspmx3.googlemail.com",
          "priority": 10
        }
      ],
      "NS": [
        "gordon.ns.cloudflare.com",
        "lia.ns.cloudflare.com"
      ]
    },
    "email": {
      "spf": "v=spf1 redirect=_sljmh4rts.sdmarc.net",
      "dmarc": "v=DMARC1; p=quarantine; rua=mailto:a.ljmh4rts@sdmarc.net,mailto:postmaster@takealot.com; ruf=mailto:postmaster@takealot.com; adkim=r; aspf=r",
      "dmarcPolicy": "quarantine",
      "hasMx": true,
      "nullMx": false
    }
  },
  "ssl": {
    "valid": true,
    "issuer": "GoDaddy.com, Inc.",
    "validTo": "2026-12-04T12:13:26.000Z",
    "daysToExpiry": 47,
    "sans": [
      "*.takealot.com",
      "takealot.com"
    ],
    "protocol": "TLSv1.3"
  }
}
```

The **Overview** view shows registrar, dates, nameservers, MX, SSL expiry, SPF and DMARC side by side.

### How much does it cost?

Pay per event: **$0.002 per domain checked** ($2 per 1,000 domains) – RDAP, DNS and SSL included. **No extra platform usage charges.** Invalid or failed domains are free. Set a maximum cost per run and the Actor stops cleanly when it is reached.

### FAQ

**Is RDAP the same as WHOIS?** RDAP is the IETF standard that replaces WHOIS, with JSON responses and the same registry data. ICANN requires it for all gTLDs.

**Why is `available` null for some domains?** Some ccTLDs (for example .de or .io) don't publish RDAP yet. We then fall back to DNS; if the domain has no nameservers and returns NXDOMAIN it is marked *likely available* – always confirm with a registrar before buying.

**Why don't I see the owner's name or email?** By design. Registrant contact data is personal data; we don't collect or store it. Most registries redact it anyway (GDPR).

**I'm getting RDAP 429 errors.** Some registries rate-limit. Lower `maxConcurrency` (e.g. 3) for large lists from the same TLD.

# Changelog

This Actor's version history is a separate document: https://apify.com/jeanswiegers/domain-intelligence/changelog.md

# Actor input Schema

## `domains` (type: `array`):

Domain names to check, one per line. URLs are accepted (the hostname is used, a leading www. is removed). IDNs are supported.

## `checkRdap` (type: `boolean`):

Query the official registry RDAP server (via the IANA bootstrap registry) for registrar, dates, status and nameservers. Personal contact data is never returned.

## `checkDns` (type: `boolean`):

Resolve DNS records and parse SPF and DMARC email-security policies.

## `dnsRecordTypes` (type: `array`):

Record types to resolve.

## `checkSsl` (type: `boolean`):

Connect to port 443 and read the certificate: issuer, validity, days to expiry, SANs, trust status.

## `maxConcurrency` (type: `integer`):

Domains checked in parallel. Registries rate-limit, so very high values can cause RDAP 429 errors.

## `timeoutSecs` (type: `integer`):

Timeout for each RDAP request and TLS connection.

## Actor input object example

```json
{
  "domains": [
    "apify.com",
    "example.com"
  ],
  "checkRdap": true,
  "checkDns": true,
  "dnsRecordTypes": [
    "A",
    "AAAA",
    "MX",
    "NS",
    "TXT",
    "CNAME",
    "CAA",
    "SOA"
  ],
  "checkSsl": true,
  "maxConcurrency": 10,
  "timeoutSecs": 15
}
```

# Actor output Schema

## `overview` (type: `string`):

One item per domain: availability, registrar, dates, nameservers, MX, SSL expiry, SPF/DMARC plus full RDAP, DNS and SSL objects.

## `dns` (type: `string`):

DNS records and email security per domain.

## `runSummary` (type: `string`):

Totals of succeeded and failed domains.

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "domains": [
        "apify.com",
        "example.com"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("jeanswiegers/domain-intelligence").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "domains": [
        "apify.com",
        "example.com",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("jeanswiegers/domain-intelligence").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "domains": [
    "apify.com",
    "example.com"
  ]
}' |
apify call jeanswiegers/domain-intelligence --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,jeanswiegers/domain-intelligence"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/dIOe1jsbWOhvxy8ZL/builds/d4rQBNG7udK7fhbVH/openapi.json