Domain Intelligence – Bulk RDAP (WHOIS) Lookup, DNS, SPF/DMARC, SSL Expiry & Availability

Check hundreds of domains in seconds. For every domain you get registration data from the official registry (registrar, creation and expiry dates, EPP status, nameservers, DNSSEC), all key DNS records (A, AAAA, MX, NS, TXT, CNAME, CAA, SOA), parsed SPF and DMARC email-security policies, the live SSL/TLS certificate (issuer, validity, days to expiry, SANs, trust status), and an availability verdict – all in one row, ready for CSV, Excel, JSON or API.

Registration data comes from RDAP, the modern, structured successor to WHOIS, using the official IANA bootstrap registry to find each TLD's authoritative server. No WHOIS scraping, no API keys.

What can I use it for?

• 📅 Domain portfolio & SSL expiry monitoring – schedule a daily run and alert before domains or certificates expire.
• ✉️ Email deliverability audits – find domains missing SPF, DMARC or MX records, or using p=none.
• 🛡️ Security & brand protection – inventory nameservers, registrars, CAA records and certificate issuers across lookalike domains.
• 🔎 Lead enrichment & sales intelligence – enrich company domain lists with hosting/email provider (MX, NS) and domain age.
• 🛒 Domain investing – check availability and expiry dates of name lists in bulk.

Features

• RDAP via IANA bootstrap for every gTLD and many ccTLDs; follows registrar referrals for thin registries (.com/.net)
• Privacy-safe: registrant, admin and tech contact details are never returned – only the registrar and which contact roles exist
• DNS via public resolvers (Cloudflare, Google, Quad9), SPF + DMARC parsing
• SSL certificate details even when the certificate is invalid (with the validation error)
• Availability: authoritative from the registry (RDAP 404), with a DNS fallback for TLDs without RDAP (availabilitySource tells you which)
• Accepts URLs and IDNs, de-duplicates, strips www.; per-domain errors; you pay only for successful checks

Input example

{ "domains": ["apify.com", "example.com", "my-new-startup-idea.com"], "checkRdap": true, "checkDns": true, "checkSsl": true }

Output example

One dataset item per domain (real output, trimmed):

{
  "domain": "takealot.com",
  "status": "succeeded",
  "available": false,
  "availabilitySource": "rdap",
  "summary": {
    "registrar": "GoDaddy.com, LLC",
    "createdAt": "2011-06-01T16:11:28Z",
    "expiresAt": "2029-06-01T16:11:28Z",
    "sslIssuer": "GoDaddy.com, Inc.",
    "sslDaysToExpiry": 47,
    "sslTrusted": true,
    "spf": "v=spf1 redirect=_sljmh4rts.sdmarc.net",
    "dmarcPolicy": "quarantine",
    "mx": "aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, aspmx2.googlemail.com, aspmx3.googlemail.com",
    "nameservers": "gordon.ns.cloudflare.com, lia.ns.cloudflare.com"
  },
  "registration": {
    "registrar": "GoDaddy.com, LLC",
    "registrarIanaId": "146",
    "createdAt": "2011-06-01T16:11:28Z",
    "expiresAt": "2029-06-01T16:11:28Z",
    "status": [
      "client delete prohibited",
      "client renew prohibited",
      "client transfer prohibited",
      "client update prohibited"
    ],
    "nameservers": [
      "gordon.ns.cloudflare.com",
      "lia.ns.cloudflare.com"
    ],
    "dnssec": false,
    "contactsRedacted": true
  },
  "dns": {
    "records": {
      "A": [
        "104.16.71.64",
        "104.16.72.64"
      ],
      "MX": [
        {
          "exchange": "aspmx.l.google.com",
          "priority": 1
        },
        {
          "exchange": "alt1.aspmx.l.google.com",
          "priority": 5
        },
        {
          "exchange": "alt2.aspmx.l.google.com",
          "priority": 5
        },
        {
          "exchange": "aspmx2.googlemail.com",
          "priority": 10
        },
        {
          "exchange": "aspmx3.googlemail.com",
          "priority": 10
        }
      ],
      "NS": [
        "gordon.ns.cloudflare.com",
        "lia.ns.cloudflare.com"
      ]
    },
    "email": {
      "spf": "v=spf1 redirect=_sljmh4rts.sdmarc.net",
      "dmarc": "v=DMARC1; p=quarantine; rua=mailto:a.ljmh4rts@sdmarc.net,mailto:postmaster@takealot.com; ruf=mailto:postmaster@takealot.com; adkim=r; aspf=r",
      "dmarcPolicy": "quarantine",
      "hasMx": true,
      "nullMx": false
    }
  },
  "ssl": {
    "valid": true,
    "issuer": "GoDaddy.com, Inc.",
    "validTo": "2026-12-04T12:13:26.000Z",
    "daysToExpiry": 47,
    "sans": [
      "*.takealot.com",
      "takealot.com"
    ],
    "protocol": "TLSv1.3"
  }
}

The Overview view shows registrar, dates, nameservers, MX, SSL expiry, SPF and DMARC side by side.

How much does it cost?

Pay per event: $0.002 per domain checked ($2 per 1,000 domains) – RDAP, DNS and SSL included. No extra platform usage charges. Invalid or failed domains are free. Set a maximum cost per run and the Actor stops cleanly when it is reached.

FAQ

Is RDAP the same as WHOIS? RDAP is the IETF standard that replaces WHOIS, with JSON responses and the same registry data. ICANN requires it for all gTLDs.

Why is available null for some domains? Some ccTLDs (for example .de or .io) don't publish RDAP yet. We then fall back to DNS; if the domain has no nameservers and returns NXDOMAIN it is marked likely available – always confirm with a registrar before buying.

Why don't I see the owner's name or email? By design. Registrant contact data is personal data; we don't collect or store it. Most registries redact it anyway (GDPR).

I'm getting RDAP 429 errors. Some registries rate-limit. Lower maxConcurrency (e.g. 3) for large lists from the same TLD.