Domain Lookup: RDAP plus DNS, SPF and DMARC

Look up thousands of domains in one run and get the registration facts and email setup for each: registrar, creation date, expiry date and days left, status codes, nameservers, DNSSEC, A and MX records, the mail provider behind them, and SPF and DMARC checks.

Registration data comes from RDAP, the official successor to WHOIS that every gTLD registry now runs, found through the IANA RDAP registry. DNS comes from public DNS over HTTPS. No scraping of WHOIS websites, no captchas, no proxies.

Built and maintained by Keel & Charter.

Use cases

• Expiring domain watch. Sort by daysUntilExpiry across a portfolio or a prospect list.
• Lead enrichment. Company age, registrar and mail provider (Google Workspace, Microsoft 365 and more) for B2B lists.
• Email deliverability audits. Who has SPF, who has DMARC and which policy (none, quarantine, reject).
• Security and brand checks. Status locks, DNSSEC and nameserver changes on lookalike domains.
• Availability checks. registered: false means the registry has no record of the name.

Input

Field	What it does
domains	Required. Domains or links, one per line. https://www.example.org/page becomes example.org.
includeRdap	Registration data. On by default.
includeDns	DNS records plus mail provider, SPF and DMARC. On by default.
dnsRecordTypes	Any of A, AAAA, MX, NS, TXT, CNAME, CAA.
maxConcurrency	Lookups at once (default 10).

{ "domains": ["apify.com", "github.com", "bbc.co.uk"] }

Output

{
  "domain": "apify.com",
  "registered": true,
  "registrar": "Amazon Registrar, Inc.",
  "registrarIanaId": "468",
  "createdAt": "2009-06-02T17:14:10Z",
  "expiresAt": "2035-06-02T17:14:10Z",
  "daysUntilExpiry": 3141,
  "ageDays": 6355,
  "status": ["client transfer prohibited"],
  "nameservers": ["ns-1225.awsdns-25.org", "ns-449.awsdns-56.com"],
  "dnssec": true,
  "dns": { "a": ["..."], "mx": ["..."], "ns": ["..."], "txt": ["..."] },
  "mailProvider": "Google Workspace",
  "hasSpf": true,
  "hasDmarc": true,
  "dmarcPolicy": "reject",
  "checkedAt": "2026-10-26T02:46:36+00:00"
}

Pricing

Pay per event, no subscription and no separate compute charge:

Event	Price
Domain lookup	$0.002 per domain ($2 per 1,000)
Actor start	$0.00005 per run

Example: 5,000 domains cost about $10. Invalid input, email addresses and lookups that return no data at all are skipped and never charged. Set a maximum cost per run in the run options and the Actor stops cleanly when it is reached.

Pricing may change; any change follows Apify's notice rules.

Good to know

• Privacy first. Registrant, admin and tech contacts are never read or stored, only the registrar company. Email addresses in DNS text (such as DMARC report inboxes) are replaced with [email removed]. Email addresses are not accepted as input.
• Some country domains have no RDAP yet (for example .de and .io). For those you still get DNS, mail provider, SPF and DMARC, and rdapError explains why registration data is missing.
• Subdomains work. shop.example.org is looked up as example.org.
• Registries limit request rates, so each registry server gets at most 3 requests at a time with automatic retry.

Feedback

Want another field or check? Open an issue on the Issues tab and Keel & Charter will take a look.

FAQ

Is this a WHOIS lookup? Yes, through RDAP, which ICANN requires every gTLD registry and registrar to run. Since January 2025 it is the definitive source for gTLD registration data (.com, .name and .post registries still keep a WHOIS service too). You get the same registration facts in structured JSON, without scraping WHOIS sites.

Can I find which email provider a company uses? Yes. mailProvider is read from MX records, for example Google Workspace or Microsoft 365.

More from Keel & Charter

• Greenhouse, Lever, Ashby and Workable Jobs Scraper
• Workday Jobs Scraper
• Wayback Machine Domain History
• South Carolina Short Term Rental Regulations