Domain WHOIS & DNS Lookup – RDAP, MX, SPF, DMARC, DKIM

Bulk domain WHOIS lookup and DNS lookup in one run. Paste domains, website URLs or e-mail addresses and get one clean record per domain with:

• WHOIS / registration data from the official registry RDAP servers (the ICANN successor to WHOIS): registrar and IANA ID, creation, update and expiry dates, domain age, days until expiry, EPP status codes, nameservers, DNSSEC, abuse contact and – where the registry publishes it – registrant organization and country.
• DNS records: A, AAAA, MX, NS, TXT (and CAA on request), resolved over DNS-over-HTTPS.
• E-mail intelligence: e-mail provider (Google Workspace, Microsoft 365, Zoho, Proton, Mimecast, Proofpoint …), SPF policy and includes, DMARC policy and report addresses, DKIM selectors found, sending services (SendGrid, Mailchimp, HubSpot, Salesforce …) and a 0–100 e-mail security score.
• SaaS verification records found in TXT (Google, Microsoft 365, Atlassian, Stripe, OpenAI, Slack, Zoom, DocuSign …) – a quick tech-stack hint for B2B prospecting.
• Availability: unregistered domains come back with registered: false.

Price: $0.0024 per domain. No start fee, no platform usage charges, invalid inputs and duplicates are free.

Use cases

• Lead enrichment / B2B prospecting – which e-mail provider and SaaS tools does a company use? How old is the domain?
• Domain portfolio monitoring – expiry dates, registrar, status locks, DNSSEC across hundreds of domains; schedule it and alert on daysUntilExpiry.
• E-mail deliverability & security audits – missing SPF, p=none DMARC, no DKIM.
• Fraud and phishing triage – very young domains, odd registrars, no mail setup.
• Domain availability checks – registered: false.

Input

Field	Default	What it does
domains	–	Domains, URLs, subdomains or e-mail addresses (reduced to the registrable domain, e.g. https://www.shop.example.co.uk/x → example.co.uk).
includeWhois	true	RDAP registration data.
followRegistrarRdap	true	For thin registries (.com/.net) also query the registrar's RDAP server for registrant country/organization and abuse contacts.
includeDns	true	DNS records + e-mail analysis.
checkDkim / dkimSelectors	true / 7 common selectors	DKIM keys can only be probed by selector name.
includeCaa	false	CAA records.
includeRawRdap	false	Full RDAP JSON in rdapRaw.
maxDomains	0	Stop after N unique domains (0 = all).
maxConcurrency	10	Domains in parallel.

{ "domains": ["apify.com", "https://www.spotify.com/se/", "jane@nokia.fi"] }

Output (one item per domain)

{
  "recordType": "domain",
  "input": "https://www.spotify.com/se/",
  "domain": "spotify.com",
  "registered": true,
  "whoisSource": "rdap",
  "registrar": "Abion AB",
  "registrarIanaId": "73",
  "createdDate": "2006-04-23T09:07:50Z",
  "expiresDate": "2030-04-23T09:07:50Z",
  "domainAgeDays": 7494,
  "daysUntilExpiry": 1271,
  "statuses": ["client transfer prohibited", "server delete prohibited"],
  "nameservers": ["dns1.p07.nsone.net", "ns-cloud-a1.googledomains.com"],
  "dnssec": false,
  "registrant": { "organization": "Spotify AB", "country": "SE", "redacted": false },
  "abuseEmail": "abuse@abion.com",
  "dns": { "a": ["35.186.224.24"], "mx": [{ "priority": 1, "host": "aspmx.l.google.com" }], "ns": ["..."], "txt": ["..."] },
  "email": {
    "acceptsMail": true,
    "provider": "Google Workspace",
    "spf": { "allQualifier": "softfail", "includes": ["_spf.google.com", "..."] },
    "dmarc": { "policy": "reject", "reportEmails": ["..."] },
    "dkimSelectorsFound": ["google", "k1", "s1"],
    "sendingServices": ["Google Workspace", "..."],
    "securityScore": 100
  },
  "verifiedServices": ["Microsoft 365", "Apple", "Atlassian", "Meta", "OpenAI"],
  "warnings": [],
  "checkedAt": "2026-10-29T13:40:00Z"
}

Errors come back as free items with recordType: "error" (invalid_domain, lookup_failed). Run counts are saved as RUN_STATS in the key-value store.

E-mail security score (0–100): SPF present 30, SPF ends in -all/~all 10, DMARC present 20, DMARC quarantine 15 / reject 25, DKIM selector found 15.

Pricing

Event	Price
Domain lookup (one unique domain delivered)	$0.0024

1,000 domains = $2.40. Unregistered domains are charged (availability is a result); invalid inputs, duplicates and lookups where every source failed are free. Set a maximum charge per run and the Actor stops cleanly before exceeding it.

Coverage and limits

• RDAP covers all gTLDs (.com, .net, .org, .app, .dev, .ai …) and many ccTLDs (.uk, .fr, .nl, .no, .fi, .pl, .cz, .io, .co …) via the IANA bootstrap registry.
• Some ccTLDs publish no RDAP (e.g. .se, .dk, .eu, .es, .it, .be, .at); .de RDAP terms forbid general use, so it is skipped. For these you get whoisSource: "not_available" plus full DNS and e-mail data. Classic port-43 WHOIS is not used.
• Registrant data is often redacted under GDPR; registrant.redacted tells you when. Countries are returned as published by the registry (ISO code or name).
• DNS is resolved via Cloudflare DNS-over-HTTPS with Google as fallback.
• RDAP data is subject to each registry's terms of use; use it for lawful purposes (no spam).

FAQ

Is this WHOIS? Yes – RDAP is the official, structured replacement for WHOIS that ICANN made the definitive source for gTLD registration data in January 2025 (port-43 WHOIS was sunset). Can I check thousands of domains? Yes. Per-server rate limits are respected automatically. Can I run it on a schedule? Yes – create a task with your domain list and schedule it; filter on daysUntilExpiry or email.dmarc.policy.