Domain WHOIS, DNS & SSL Checker (Bulk RDAP Lookup)

Check hundreds of domains at once and get one clean row per domain with:

• Registration (WHOIS): registered or available, registrar, creation date, expiry date and days left, domain age, status codes, nameservers, DNSSEC.
• DNS records: A, AAAA, MX, NS, TXT, CNAME and CAA.
• Email setup and security: email provider (Google Workspace, Microsoft 365, Zoho...), SPF and DMARC records and policy.
• SSL certificate: issuer, valid from and to, days until expiry, covered hostnames, TLS version.
• Site-verification tokens found in DNS, which show which SaaS tools a company uses (Google, Atlassian, OpenAI, Zapier, Docker...).
• An issues list with plain-English warnings: expiring domain or SSL, invalid certificate, missing SPF or DMARC.

It uses RDAP, the official successor of WHOIS run by the domain registries, plus public DNS and a standard TLS handshake. No personal registrant data is collected.

Who is it for?

• IT, DevOps and agencies: monitor client domains and SSL certificates, and never miss a renewal. Schedule it weekly.
• Email deliverability and security teams: audit SPF and DMARC across many domains.
• Sales and lead generation: enrich company lists with email provider, domain age and the SaaS tools they verify.
• Domain investors: check availability, age and expiry of domain lists in bulk.
• Security and due diligence: map nameservers, hosting IPs and certificate coverage.

How to use it

1. Paste domains or URLs, one per line. https://www.example.com/page is cleaned to example.com, and subdomains are fine.
2. Keep all three checks on, or turn off the ones you don't need.
3. Click Start and export to Excel, CSV or JSON, or connect it to the API. Tip: schedule it weekly and filter for rows with issues.

Input example

{
  "domains": ["apify.com", "https://www.stripe.com/pricing", "bbc.co.uk", "my-new-idea-xyz.com"],
  "checkRegistration": true,
  "checkDns": true,
  "checkSsl": true,
  "expiryWarningDays": 30
}

Output example (shortened)

{
  "domain": "apify.com",
  "registered": true,
  "registrar": "Amazon Registrar, Inc.",
  "createdAt": "2009-06-02T17:14:10Z",
  "expiresAt": "2035-06-02T17:14:10Z",
  "domainDaysLeft": 3158,
  "domainAgeYears": 17.3,
  "status": ["client transfer prohibited"],
  "nameservers": ["ns-1225.awsdns-25.org", "ns-449.awsdns-56.com"],
  "dnssec": true,
  "ipAddresses": ["3.170.42.100", "3.170.42.109"],
  "mxRecords": ["1 aspmx.l.google.com", "5 alt1.aspmx.l.google.com"],
  "emailProvider": "Google Workspace",
  "spfRecord": "v=spf1 a mx include:_spf.google.com include:mailgun.org include:amazonses.com ... -all",
  "dmarcPolicy": "reject",
  "verifications": ["aisle", "google", "openai", "tito", "zapier"],
  "sslValid": true,
  "sslIssuer": "Amazon",
  "sslValidTo": "2027-01-16T23:59:59Z",
  "sslDaysLeft": 99,
  "tlsVersion": "TLSv1.3",
  "issues": []
}

The full dns object with every record type is included in each row.

How much does it cost?

Pay-per-event: a small fee per domain checked plus a tiny per-run start fee, with no subscription and no separate platform usage costs. For example, 1,000 domains cost about $2. Invalid entries are not charged. Set Maximum cost per run to cap your spending.

Limits

• A few country registries (for example .de, .io, .so, .us) don't offer public RDAP lookups. For those, registration is confirmed from DNS, and registrar and dates are left empty.
• "Not registered" means the registry has no record. The domain is probably available, but check with a registrar before buying.

Use it through the API, integrations or AI agents

Run it from the Apify API, on a schedule, or connect it to Make, Zapier, n8n or Google Sheets. AI agents can find and call it through the Apify MCP server. Output is clean JSON with the same fields on every run.

FAQ

Why RDAP instead of classic WHOIS? RDAP is the official, structured replacement for WHOIS that ICANN requires for generic domains. It's faster, more reliable and returns consistent JSON.

Does it show the domain owner's name or email? No. Personal registrant data is redacted by most registries anyway, and this tool doesn't collect it.

Found a bug or need a feature? Open an issue. We usually reply within 24 hours.

More tools from this developer

• SAM.gov Contract Opportunities Finder & Bid Alerts: federal contract opportunities and bid alerts
• Sitemap & URL Extractor: get every URL of a website from its sitemaps
• Website to Markdown for AI & RAG: turn web pages into clean Markdown for LLMs
• Tech Stack Detector: find what any website is built with
• Apple App Store Reviews Scraper: App Store reviews and ratings for any app
• ATS Jobs Scraper: jobs from Greenhouse, Lever, Ashby, Workable and more
• Website Screenshot: full-page, mobile and PDF screenshots in bulk
• PDF to Text & Markdown Extractor: extract text from PDFs for AI and search
• SEO Meta Tags & On-Page Audit: bulk on-page SEO audit with fixes
• Bulk URL Status & Broken Link Checker: status codes, redirect chains and broken links
• RSS & Atom Feed Reader: merge and filter many news feeds
• Hacker News Scraper: HN stories, comments and Who is hiring jobs
• Academic Paper Search: papers from Crossref, arXiv and PubMed
• SEC EDGAR Filings & Financials: 10-K, 10-Q, 8-K filings and company financials