# WHOIS & Domain Lookup - Bulk RDAP, DNS, SSL & Mail Provider (`plotpointtech/bulk-domain-lookup`) Actor

Check thousands of domains in one run: registrar, creation and expiry dates, domain age, DNS records, email provider, SPF and DMARC, SSL certificate expiry and website status. Official RDAP data. $1.50 per 1,000 domains.

- **URL**: https://apify.com/plotpointtech/bulk-domain-lookup.md
- **Developed by:** [Plot Point Technologies](https://apify.com/plotpointtech) (community)
- **Categories:** Developer tools, SEO tools, Automation
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $0.93 / 1,000 domain records

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.
Since this Actor supports Apify Store discounts, the price gets lower the higher subscription plan you have.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## WHOIS & Domain Lookup: Bulk RDAP, DNS, SSL and Email Provider

**Check a list of domains in one run and get one clean record per domain** with its registration details (registrar, creation and expiry dates, domain age), DNS setup, email provider, SPF and DMARC, SSL certificate and website status. Registration data comes from the registries' official RDAP services, the modern replacement for WHOIS. **$1.50 per 1,000 domains.**

### What can this bulk domain lookup do?

| Area | What you get | Source |
|---|---|---|
| **Registration (WHOIS/RDAP)** | registrar, IANA ID, abuse email, registrant organisation and country (where published), created, updated and expiry dates, domain age, days to expiry, status codes, nameservers, DNSSEC | Official registry RDAP via IANA's directory |
| **DNS** | A, AAAA, MX, NS, TXT, www CNAME, SPF and the services it names, DMARC and its policy, verification records, email provider | Public DNS-over-HTTPS (Google, Cloudflare backup) |
| **SSL certificate** | issuer, subject, SANs, valid from/to, days to expiry, validity and error, TLS version | Direct TLS connection to port 443 |
| **Website** | HTTPS status, final URL, server header | One HTTPS request to the home page |

`mailProvider` identifies Google Workspace, Microsoft 365, Zoho Mail, Proofpoint, Mimecast and others from MX records. `spfServices` lists senders such as SendGrid, Mailchimp or HubSpot. `verificationServices` shows which services (Google, Microsoft, Atlassian, DocuSign, Stripe...) have verified the domain.

Input can be domains, URLs or email addresses; subdomains are reduced to the registered domain unless you choose to keep them.

### Who uses it?

- **Sales and marketing teams** enriching lead lists with email platform and tools in use.
- **IT, security and compliance teams** auditing a domain portfolio for expiring domains and certificates or missing DMARC.
- **Domain investors and brand managers** tracking age, registrar and expiry.
- **Email deliverability consultants** checking SPF and DMARC across client domains.

### How to use it

1. Click **Try for free** (or **Start**).
2. Paste **Domains** (or URLs or email addresses), one per line.
3. Leave all checks on, or turn off the ones you do not need.
4. Run it, then filter for `expiresInDays < 60`, `sslDaysToExpiry < 21` or an empty `dmarcPolicy`.

### Input example

```json
{
  "domains": [
    "python.org",
    "shopify.com",
    "bbc.co.uk",
    "info@spiegel.de"
  ],
  "checkRegistration": true,
  "checkDns": true,
  "checkSsl": true,
  "checkHttps": true
}
```

### Output example

```json
{
  "domain": "python.org",
  "registeredDomain": "python.org",
  "rdapSource": "https://rdap.publicinterestregistry.org/rdap",
  "registered": true,
  "registrar": "Gandi SAS",
  "registrarIanaId": "81",
  "registrarUrl": null,
  "registrarAbuseEmail": "abuse@support.gandi.net",
  "registrantOrganization": "Python Software Foundation",
  "registrantCountry": "US",
  "createdDate": "1995-03-27T05:00:00Z",
  "updatedDate": "2026-08-12T05:01:11Z",
  "expiryDate": "2033-03-28T05:00:00Z",
  "domainAgeDays": 11538,
  "expiresInDays": 2342,
  "domainStatus": [
    "client transfer prohibited"
  ],
  "rdapNameservers": [
    "ns-1134.awsdns-13.org",
    "ns-2046.awsdns-63.co.uk",
    "ns-484.awsdns-60.com"
  ],
  "dnssec": false,
  "dnsResolved": true,
  "aRecords": [
    "151.101.128.223",
    "151.101.192.223",
    "151.101.0.223"
  ],
  "aaaaRecords": [
    "2a04:4e42:200::223",
    "2a04:4e42:600::223",
    "2a04:4e42:400::223"
  ],
  "mxRecords": [
    "50 mail.python.org"
  ],
  "nsRecords": [
    "ns-1134.awsdns-13.org",
    "ns-2046.awsdns-63.co.uk",
    "ns-484.awsdns-60.com"
  ],
  "txtRecords": [
    "openai-domain-verification=dv-VgeNijVDgW7g56UZyGIVyKNr",
    "status-page-domain-verification=9y2klhzbxsgk",
    "libera-1298aas"
  ],
  "wwwCname": "dualstack.python.map.fastly.net",
  "spfRecord": "v=spf1 mx ip4:188.166.95.178/32 ip6:2a03:b0c0:2:d0::71:1 include:stspg-customer.com include:_spf.google.com include:mailgun.org ~all",
  "spfServices": [
    "Google Workspace",
    "Mailgun"
  ],
  "dmarcRecord": "v=DMARC1; p=none; pct=100; rua=mailto:re+shb8ybr70a3@dmarc.postmarkapp.com; sp=none; aspf=r;",
  "dmarcPolicy": "none",
  "verificationServices": [
    "OpenAI",
    "Google",
    "GlobalSign"
  ],
  "mailProvider": "Self-hosted / other",
  "sslHost": "python.org",
  "sslValid": true,
  "sslError": null,
  "sslIssuer": "GlobalSign Atlas R3 DV TLS CA 2025 Q4",
  "sslIssuerOrganization": "GlobalSign nv-sa",
  "sslSubject": "www.python.org",
  "sslSans": [
    "www.python.org",
    "*.python.org",
    "python.org"
  ],
  "sslValidFrom": "2026-01-13T13:03:46Z",
  "sslValidTo": "2027-02-14T13:03:45Z",
  "sslDaysToExpiry": 108,
  "tlsVersion": "TLSv1.3",
  "httpsResponds": true,
  "httpsStatus": 200,
  "finalUrl": "https://www.python.org/",
  "serverHeader": "nginx",
  "httpsError": null,
  "checkedAt": "2026-10-28T14:35:14Z"
}
```

### How much does it cost?

**$1.50 per 1,000 domains** ($0.0015 per domain, all checks included), plus a $0.00005 start fee per run.

| You check | You pay |
|---|---|
| 100 domains | $0.15 |
| 2,000 customer domains every month | $3.00 a month |
| 20,000 domains | $30.00 |

**Volume discounts on higher Apify plans.** The prices above are for the Apify Free plan. On paid plans the per-result price drops automatically: about 15% lower on Bronze, 25% lower on Silver and 38% lower on Gold and above.

### Use it via API, Make, Zapier, n8n or an AI agent

**Apify API.** Start a run and get the results back in one HTTP request (replace `YOUR_API_TOKEN` with the token from Apify Console > Settings > Integrations):

```bash
curl -X POST "https://api.apify.com/v2/acts/plotpointtech~bulk-domain-lookup/run-sync-get-dataset-items?token=YOUR_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domains": ["python.org", "shopify.com", "bbc.co.uk", "info@spiegel.de"], "checkRegistration": true, "checkDns": true, "checkSsl": true, "checkHttps": true}'
```

For longer jobs, start the run asynchronously and read the dataset when it finishes. Official `apify-client` libraries exist for Python and JavaScript; the **API** tab on this page has ready-made code.

**No-code automation.** Connect the tool to **Make, Zapier, n8n, Google Sheets, Slack, Airtable** or any webhook with Apify integrations, and use **Schedules** in Apify Console to run it hourly, daily or weekly.

**AI agents (MCP).** Give Claude, ChatGPT, Cursor, VS Code or any MCP-compatible agent direct access to this tool through the hosted Apify MCP server. Add this server URL to your client:

```
https://mcp.apify.com?tools=plotpointtech/bulk-domain-lookup
```

The agent can then call the tool with the same input fields shown above and read the results.

### FAQ

**Is it legal to look up domain data?**
Yes. RDAP and DNS are public services designed for automated queries, and certificates are presented to every visitor. The tool does not collect registrant names, emails or phone numbers of private individuals; redacted values stay empty. Some registries limit how their data may be used (for example DENIC, .de, to technical and administrative purposes); follow those terms.

**What is RDAP and how is it different from WHOIS?**
RDAP is the structured, standardised successor to WHOIS, run by the same registries and registrars. It returns the same registration facts in a reliable format.

**What does `registered: false` mean?**
The registry's RDAP service reported the domain as not found, which usually means it is available. It is empty when a registry has no RDAP service.

**Why are dates missing for some country domains?**
Some ccTLD registries publish limited data or have no RDAP at all; `rdapError` explains why. DNS, SSL and HTTPS checks still work for every domain.

**Can it check whether domains are available to register?**
Yes, indirectly: `registered: false` from the registry indicates an unregistered domain.

### Related tools from Plot Point Technologies

- [Website Tech Stack Detector - CMS, Analytics & 290+ Techs](https://apify.com/plotpointtech/website-technology-detector): CMS, ecommerce, analytics, pixels and hosting of any website.
- [Email & Contact Scraper - Website Emails, Phones & Socials](https://apify.com/plotpointtech/website-contact-finder): emails, phones and social links from any list of company websites.
- [SEO Audit Crawler - Titles, Meta, H1, Broken Pages & Links](https://apify.com/plotpointtech/sitemap-seo-page-audit): on-page SEO check of every page in a website's sitemap.
- [Website Screenshot & PDF API - Full Page, Mobile, $1.50/1K](https://apify.com/plotpointtech/website-screenshot-pdf-generator): full-page PNG, JPEG or PDF captures of any web page.

Plot Point Technologies is not affiliated with IANA, any domain registry or registrar, Google or Cloudflare.

***

If this tool saved you time, we would be grateful for a short review on this page; it helps other people find it. If something did not work as expected, please open an issue on the **Issues** tab and we will look into it quickly.

# Actor input Schema

## `domains` (type: `array`):

Domain names, website URLs or email addresses, e.g. python.org, https://www.shopify.com/pricing, info@bbc.co.uk. Subdomains are reduced to the registered domain.

## `keepSubdomains` (type: `boolean`):

Check DNS, SSL and HTTPS on the exact host you enter (e.g. shop.example.com) instead of reducing it to the registered domain. Registration data always comes from the registered domain.

## `checkRegistration` (type: `boolean`):

Registrar, creation, update and expiry dates, domain age, status codes, nameservers and DNSSEC, from the registry's official RDAP service.

## `followRegistrarRdap` (type: `boolean`):

For .com/.net and similar domains, the registrant organisation and country are held by the registrar. When on, one extra request is made to the registrar's RDAP service. Privacy-protected values are left empty.

## `checkDns` (type: `boolean`):

A, AAAA, MX, NS, TXT, www CNAME, SPF, DMARC, verification records and mail-provider detection.

## `checkSsl` (type: `boolean`):

Connects to port 443 and reads the certificate: issuer, validity dates, days to expiry and whether it is trusted.

## `checkHttps` (type: `boolean`):

Opens https://domain/ and records the status code, final URL after redirects and server header.

## `maxResults` (type: `integer`):

Stop after this many domains.

## Actor input object example

```json
{
  "domains": [
    "python.org",
    "shopify.com",
    "bbc.co.uk",
    "spiegel.de"
  ],
  "keepSubdomains": false,
  "checkRegistration": true,
  "followRegistrarRdap": true,
  "checkDns": true,
  "checkSsl": true,
  "checkHttps": true,
  "maxResults": 10000
}
```

# Actor output Schema

## `results` (type: `string`):

No description

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "domains": [
        "python.org",
        "shopify.com",
        "bbc.co.uk",
        "spiegel.de"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("plotpointtech/bulk-domain-lookup").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "domains": [
        "python.org",
        "shopify.com",
        "bbc.co.uk",
        "spiegel.de",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("plotpointtech/bulk-domain-lookup").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "domains": [
    "python.org",
    "shopify.com",
    "bbc.co.uk",
    "spiegel.de"
  ]
}' |
apify call plotpointtech/bulk-domain-lookup --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,plotpointtech/bulk-domain-lookup"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/fhYhVKoQv9pH0dnoa/builds/cTXUEqlYZ4Car7vAj/openapi.json