# DNS, WHOIS, SPF/DMARC, SSL Domain Audit (`jungle_synthesizer/dns-domain-audit`) Actor Bulk domain audit covering DNS records, WHOIS registration, SPF/DMARC/DKIM email auth, SSL certificate, and reverse DNS. No browser, no proxy -- pure Node, sub-second per domain. - **URL**: https://apify.com/jungle\_synthesizer/dns-domain-audit.md - **Developed by:** [BowTiedRaccoon](https://apify.com/jungle_synthesizer) (community) - **Categories:** Developer tools, Automation, Lead generation - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, NaN bookmarks - **User rating**: No ratings yet ## Pricing Pay per event This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/platform/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## DNS, WHOIS, SPF/DMARC, SSL Domain Audit Bulk domain audit covering DNS records, WHOIS registration, SPF / DMARC / DKIM email auth, SSL certificates, and reverse DNS. Pure Node, no browser, no proxies — sub-second per domain on most resolvers. --- ### DNS Domain Audit Features - Resolves A, AAAA, MX, TXT, NS, SOA, CNAME, CAA, and SRV records in parallel. - Pulls WHOIS / RDAP metadata: registrar, created, expires, updated, status, and nameservers. - Probes the TLS certificate on port 443 — issuer, expiry, daysToExpiry, SANs, sigAlg, serial. - Validates SPF, DMARC, and DKIM records via mailauth and a 10-selector default sweep. - Computes a deliverability score (`mxScore` 0-100) plus an A / B / C / D / F audit grade with an issue list. - Optional reverse DNS resolves A / AAAA addresses back to PTR records. - Pure Node — no browser, no proxy, no captcha bills. 10,000 domains costs about $50. --- ### Who Uses Domain Audit Data? - **Sales-ops teams** — qualify inbound domains by registration age, registrar, and email-auth posture. - **DevOps and SRE** — monitor SSL expiry windows across portfolios that long since outgrew a spreadsheet. - **Security analysts** — flag missing DMARC, weak SPF, dangling CNAMEs, and CAs without a CAA record. - **Email deliverability auditors** — score SPF / DMARC / DKIM alignment before a campaign launches, not after. - **M&A due diligence** — inventory the domain hygiene of an acquisition target without filing a ticket with IT. --- ### How DNS Domain Audit Works 1. Paste in a list of domains or URLs. URLs have their host extracted automatically and duplicates are removed. 2. For each domain the actor runs DNS, WHOIS, TLS, and email-auth probes in parallel with per-check timeouts. 3. Optional reverse DNS resolves the A / AAAA addresses back to PTRs. 4. Each row gets a grade (A through D, F when checks fail) and an `issues[]` list with `level`, `code`, and `message`. --- ### Input ```json { "domains": ["example.com", "github.com", "cloudflare.com"], "maxItems": 5, "recordTypes": ["A", "AAAA", "MX", "TXT", "NS", "SOA", "CAA"], "checkSpfDmarcDkim": true, "checkWhois": true, "checkSsl": true, "reverseDns": false, "concurrency": 25 } ```` | Field | Type | Default | Description | |-------|------|---------|-------------| | `domains` | array | required | Domains or URLs to audit. URLs have host extracted automatically. | | `maxItems` | integer | 5 | Cap on audited domains after dedup. Range 1-10000. | | `recordTypes` | array | A, AAAA, MX, TXT, NS, SOA, CNAME, CAA | Which DNS record types to query. SRV is also supported. | | `checkSpfDmarcDkim` | boolean | true | Validate email auth records via mailauth. | | `checkWhois` | boolean | true | Look up WHOIS / RDAP registration metadata. | | `checkSsl` | boolean | true | Probe the TLS certificate on port 443. | | `dkimSelectors` | array | — | Extra DKIM selectors on top of the default 10. | | `reverseDns` | boolean | false | Resolve A / AAAA addresses back to PTR records. | | `concurrency` | integer | 25 | Parallel domain audits. Hard cap at 50 to avoid resolver throttling. | *** ### DNS Domain Audit Output Fields ```json { "domain": "cloudflare.com", "dns": { "A": ["104.16.132.229", "104.16.133.229"], "MX": ["10 mailstream-east.mxrecord.io"], "TXT": ["v=spf1 ip4:199.15.212.0/22 include:_spf.google.com ~all"], "NS": ["ns3.cloudflare.com", "ns4.cloudflare.com"], "CAA": ["issue: digicert.com"] }, "whois": { "domain": "cloudflare.com", "created": "2009-02-17T22:07:54Z", "expires": "2033-02-17T22:07:54Z", "registrar": "CloudFlare, Inc.", "nameservers": ["ns3.cloudflare.com", "ns4.cloudflare.com"] }, "email": { "spfRecord": "v=spf1 ip4:199.15.212.0/22 include:_spf.google.com ~all", "spfValid": true, "dmarcRecord": "v=DMARC1; p=reject; rua=mailto:dmarc@cloudflare.com", "dmarcPolicy": "reject", "dkimResults": { "google": { "found": true, "record": "v=DKIM1; k=rsa; p=..." } }, "mxScore": 100 }, "ssl": { "issuer": "Google Trust Services / WE1", "validFrom": "2026-03-12T20:59:51.000Z", "validTo": "2026-06-10T21:59:46.000Z", "daysToExpiry": 41, "sans": ["cloudflare.com", "*.cloudflare.com"], "sigAlg": "prime256v1" }, "reverseDns": { "ips": [], "ptrs": [] }, "audit_summary": { "grade": "A", "issues": [{ "level": "info", "code": "no-caa", "message": "..." }] }, "audited_at": "2026-04-30T12:00:00Z", "errors": [] } ``` | Field | Type | Description | |-------|------|-------------| | `domain` | string | Audited domain (host extracted if a URL was provided). | | `dns` | object | Records keyed by type (A, AAAA, MX, TXT, NS, SOA, CNAME, CAA, SRV). | | `whois` | object | created, expires, updated, registrar, status, nameservers. | | `email` | object | spfRecord, spfValid, dmarcRecord, dmarcPolicy, dkimResults, mxScore (0-100). | | `ssl` | object | issuer, subject, validFrom, validTo, daysToExpiry, sans, sigAlg, serialNumber. | | `reverseDns` | object | `ips` and resolved `ptrs` (empty unless `reverseDns=true`). | | `audit_summary` | object | `grade` (A/B/C/D/F) plus `issues[]` with level, code, message. | | `audited_at` | string | ISO timestamp the audit completed. | | `errors` | array | Labels for any check that failed (e.g. `whois`, `ssl`, `dkim`). | Common issue codes: `no-spf`, `weak-spf`, `no-dmarc`, `dmarc-none`, `no-dkim`, `ssl-expired`, `ssl-expiring`, `ssl-expiring-soon`, `whois-expired`, `whois-expiring`, `no-caa`. *** ### Pricing Single DATA\_RECORD event — every audited domain bills at the same flat rate. Five DNS lookups, a WHOIS lookup, a TLS handshake, and a mailauth pass cost $0.005. | Event | Price | |-------|-------| | Actor start | $0.10 | | Per audited domain | $0.005 | | Volume | Cost | |--------|------| | 100 domains | $0.60 | | 1,000 domains | $5.10 | | 10,000 domains | $50.10 | *** ### Limits - `maxItems` caps at 10,000 per run; the resolver is the bottleneck, not the actor. - The Apify console tester has a 5-minute timeout — keep `maxItems` low (default 5) when testing in-browser. - `concurrency` caps at 50 to avoid public DNS resolver rate limits. Self-hosted resolvers can go higher with care. - WHOIS data quality varies by TLD. Some registries return sparse fields; the actor surfaces what the registry actually serves. - Reverse DNS is opt-in because most A records have no PTR set. - DKIM probes a 10-selector default list. If you use a non-standard selector, add it via `dkimSelectors`. *** ### Related Actors - **SSL & Security Headers Checker** — pairs with this actor for full TLS-and-headers grading per URL. - **Sitemap Walker Pro** — discover URLs for a domain that you then audit here. - **Structured Data Validator Pro** — same primitive shape for SEO-side audits. *** ### Need More Features? Need extra DKIM selectors, custom record types, or a private resolver endpoint? [File an issue](https://console.apify.com/actors/issues) or get in touch. ### Why Use DNS Domain Audit? - **Cheap** — $0.005 per domain. 10,000 domains costs about a fast-food lunch. - **Complete** — DNS, WHOIS, SSL, and email auth in a single row, with a sortable grade. Most tools make you stitch three APIs together to get the same picture. - **No proxies, captchas, or browsers** — pure Node lookups. Nothing to break, nothing to debug at 3am. *** Built by [OrbTop](https://orbtop.com). # Actor input Schema ## `sp_intended_usage` (type: `string`): Please describe how you plan to use the data extracted by this crawler. ## `sp_improvement_suggestions` (type: `string`): Provide any feedback or suggestions for improvements. ## `sp_contact` (type: `string`): Provide your email address so we can get in touch with you. ## `domains` (type: `array`): List of domains (e.g. example.com) or URLs (https://example.com/page) to audit. URLs have host extracted automatically. ## `maxItems` (type: `integer`): Cap on the number of domain audits performed (after deduplication). Default 5; raise for larger batches. ## `recordTypes` (type: `array`): Which DNS record types to query. Defaults to a balanced set. ## `checkSpfDmarcDkim` (type: `boolean`): Validate email authentication records (mailauth). ## `checkWhois` (type: `boolean`): Look up domain registration metadata (created, expires, registrar). ## `checkSsl` (type: `boolean`): Probe TLS certificate (issuer, expiry, SANs, sigAlg). ## `dkimSelectors` (type: `array`): Custom DKIM selectors to probe in addition to the defaults (default, google, k1, selector1, selector2, mailo, mxvault, dkim, smtp). ## `reverseDns` (type: `boolean`): Resolve A/AAAA addresses back to PTR records. ## `concurrency` (type: `integer`): Parallel domain audits. Cap at 50 to avoid resolver throttling. ## Actor input object example ```json { "sp_intended_usage": "Describe your intended use...", "sp_improvement_suggestions": "Share your suggestions here...", "sp_contact": "Share your email here...", "domains": [ "example.com", "github.com", "cloudflare.com" ], "maxItems": 5, "recordTypes": [ "A", "AAAA", "MX", "TXT", "NS", "SOA", "CNAME", "CAA" ], "checkSpfDmarcDkim": true, "checkWhois": true, "checkSsl": true, "reverseDns": false, "concurrency": 25 } ``` # Actor output Schema ## `results` (type: `string`): No description # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "sp_intended_usage": "Describe your intended use...", "sp_improvement_suggestions": "Share your suggestions here...", "sp_contact": "Share your email here...", "domains": [ "example.com", "github.com", "cloudflare.com" ], "maxItems": 5, "recordTypes": [ "A", "AAAA", "MX", "TXT", "NS", "SOA", "CNAME", "CAA" ], "checkSpfDmarcDkim": true, "checkWhois": true, "checkSsl": true, "reverseDns": false, "concurrency": 25 }; // Run the Actor and wait for it to finish const run = await client.actor("jungle_synthesizer/dns-domain-audit").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "sp_intended_usage": "Describe your intended use...", "sp_improvement_suggestions": "Share your suggestions here...", "sp_contact": "Share your email here...", "domains": [ "example.com", "github.com", "cloudflare.com", ], "maxItems": 5, "recordTypes": [ "A", "AAAA", "MX", "TXT", "NS", "SOA", "CNAME", "CAA", ], "checkSpfDmarcDkim": True, "checkWhois": True, "checkSsl": True, "reverseDns": False, "concurrency": 25, } # Run the Actor and wait for it to finish run = client.actor("jungle_synthesizer/dns-domain-audit").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "sp_intended_usage": "Describe your intended use...", "sp_improvement_suggestions": "Share your suggestions here...", "sp_contact": "Share your email here...", "domains": [ "example.com", "github.com", "cloudflare.com" ], "maxItems": 5, "recordTypes": [ "A", "AAAA", "MX", "TXT", "NS", "SOA", "CNAME", "CAA" ], "checkSpfDmarcDkim": true, "checkWhois": true, "checkSsl": true, "reverseDns": false, "concurrency": 25 }' | apify call jungle_synthesizer/dns-domain-audit --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=jungle_synthesizer/dns-domain-audit", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "DNS, WHOIS, SPF/DMARC, SSL Domain Audit", "description": "Bulk domain audit covering DNS records, WHOIS registration, SPF/DMARC/DKIM email auth, SSL certificate, and reverse DNS. No browser, no proxy -- pure Node, sub-second per domain.", "version": "1.0", "x-build-id": "RdOu3Gzu9SGwWjeKy" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/jungle_synthesizer~dns-domain-audit/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-jungle_synthesizer-dns-domain-audit", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/jungle_synthesizer~dns-domain-audit/runs": { "post": { "operationId": "runs-sync-jungle_synthesizer-dns-domain-audit", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/jungle_synthesizer~dns-domain-audit/run-sync": { "post": { "operationId": "run-sync-jungle_synthesizer-dns-domain-audit", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "sp_intended_usage", "sp_improvement_suggestions", "domains" ], "properties": { "sp_intended_usage": { "title": "What is the intended usage of this data?", "minLength": 1, "type": "string", "description": "Please describe how you plan to use the data extracted by this crawler." }, "sp_improvement_suggestions": { "title": "How can we improve this crawler for you?", "minLength": 1, "type": "string", "description": "Provide any feedback or suggestions for improvements." }, "sp_contact": { "title": "Contact Email", "minLength": 1, "type": "string", "description": "Provide your email address so we can get in touch with you." }, "domains": { "title": "Domains or URLs", "type": "array", "description": "List of domains (e.g. example.com) or URLs (https://example.com/page) to audit. URLs have host extracted automatically.", "items": { "type": "string" } }, "maxItems": { "title": "Max Items", "minimum": 1, "maximum": 10000, "type": "integer", "description": "Cap on the number of domain audits performed (after deduplication). Default 5; raise for larger batches.", "default": 5 }, "recordTypes": { "title": "DNS Record Types", "type": "array", "description": "Which DNS record types to query. Defaults to a balanced set.", "items": { "type": "string" } }, "checkSpfDmarcDkim": { "title": "Check SPF / DMARC / DKIM", "type": "boolean", "description": "Validate email authentication records (mailauth).", "default": true }, "checkWhois": { "title": "Check WHOIS / RDAP", "type": "boolean", "description": "Look up domain registration metadata (created, expires, registrar).", "default": true }, "checkSsl": { "title": "Check SSL Certificate", "type": "boolean", "description": "Probe TLS certificate (issuer, expiry, SANs, sigAlg).", "default": true }, "dkimSelectors": { "title": "DKIM Selectors", "type": "array", "description": "Custom DKIM selectors to probe in addition to the defaults (default, google, k1, selector1, selector2, mailo, mxvault, dkim, smtp).", "items": { "type": "string" } }, "reverseDns": { "title": "Reverse DNS", "type": "boolean", "description": "Resolve A/AAAA addresses back to PTR records.", "default": false }, "concurrency": { "title": "Concurrency", "minimum": 1, "maximum": 50, "type": "integer", "description": "Parallel domain audits. Cap at 50 to avoid resolver throttling.", "default": 25 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```