Bulk Domain Audit: WHOIS (RDAP), DNS, SPF, DMARC, SSL expiry
Pricing
$3.00 / 1,000 domain auditeds
Bulk Domain Audit: WHOIS (RDAP), DNS, SPF, DMARC, SSL expiry
Audit thousands of domains in one run: registrar, creation and expiry dates (official RDAP, no scraping), A/MX/NS records, SPF and DMARC policy, SSL certificate issuer and expiry, plus a plain list of issues.
Pricing
$3.00 / 1,000 domain auditeds
Rating
0.0
(0)
Developer
NetAudit Labs
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
9 days ago
Last modified
Categories
Security
Limited permissionsShare
Paste a list of domains, get one clean row per domain with everything you usually look up in five different tools:
| Group | Fields |
|---|---|
| Registration (RDAP) | registered, registrableDomain (parent looked up for subdomains), registrar, createdAt, expiresAt, domainAgeDays, daysUntilDomainExpiry, status, nameservers |
| DNS | resolves, aRecords, nsRecords, mxRecords, hasMx |
| Email security | spfRecord, spfAllQualifier, dmarcRecord, dmarcPolicy |
| SSL | sslValid, sslError, sslIssuer, sslValidTo, daysUntilSslExpiry |
| Summary | issues (for example MX without DMARC, SSL expires in 9 days, domain expires in 12 days) |
Why RDAP instead of WHOIS scraping
Registration data comes from the official RDAP server of each TLD registry (IANA bootstrap list). RDAP is the structured successor of port 43 WHOIS: no HTML parsing, no captcha, no rate-limited third-party site. A TLD without an RDAP server returns rdapAvailable: false and the DNS, email and SSL checks still run.
Typical uses
- Lead qualification: domain age, whether the company runs its own mail (MX), whether it protects it (DMARC).
- Email deliverability audits for agencies: find clients with no SPF, no DMARC or
p=none. - Portfolio monitoring: domains and certificates expiring in the next weeks.
- Expired domain research:
registered: falseon a list of candidates.
Input
{ "domains": ["apify.com", "https://www.example.com/page"], "includeWhois": true, "includeSsl": true, "concurrency": 10 }
Output example
{ "domain": "example.com", "registered": true, "registrar": "RESERVED-Internet Assigned Numbers Authority","createdAt": "1995-08-14T04:00:00Z", "expiresAt": "2027-08-13T04:00:00Z", "domainAgeDays": 11395,"resolves": true, "hasMx": true, "spfRecord": "v=spf1 -all", "dmarcPolicy": "reject","sslValid": true, "sslIssuer": "DigiCert Inc", "daysUntilSslExpiry": 80, "issues": [] }
Pricing
Pay per event: you are charged once per audited domain (domain-audited), duplicates in the input are removed first. Use maxDomains to cap the cost of a run.
Limits
- DNS queries go to public resolvers (1.1.1.1, 8.8.8.8). DKIM is not checked because it needs the selector name.
- Some registries hide the registrar or dates in RDAP; those fields are then
null.