# Domain Intelligence: WHOIS, DNS, SPF/DMARC/DKIM & SSL (`poised_beardlichen/domain-intelligence`) Actor

Use this when you need everything about a domain in one call: RDAP WHOIS registration (registrar, created/expiry, status, nameservers), DNS records, email auth (SPF, DMARC, DKIM, MTA-STS) with a grade, and SSL certificate expiry. Bulk input; failed domains are free.

- **URL**: https://apify.com/poised_beardlichen/domain-intelligence.md
- **Developed by:** [Isaac](https://apify.com/poised_beardlichen) (community)
- **Categories:** Developer tools, Business, AI
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

$2.00 / 1,000 domain checkeds

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Domain Intelligence: WHOIS/RDAP, DNS, SPF/DMARC/DKIM & SSL in One Call

**Use this when** you or your AI agent need the full picture of a domain in one call: who it's registered with and when it expires, what its DNS points to, whether its email is properly authenticated, and whether its SSL certificate is valid. **$0.002 per domain.** Invalid, unregistered or failed domains are free.

**Use this when you're...**

- vetting a supplier, lead or suspicious site (domain age, registrar, expiry)
- diagnosing email deliverability (SPF, DMARC policy, DKIM, MTA-STS, with a grade and a list of fixes)
- monitoring SSL certificates and domain renewals across a portfolio
- enriching a list of company domains for sales or security research

### Input

```json
{"domain": "stripe.com"}
```

or in bulk: `{"domains": ["stripe.com", "https://www.bbc.co.uk/news", "jane@canva.com"]}`. URLs and email addresses are reduced to the domain, and duplicates are skipped. You can switch off `includeRegistration`, `includeEmailAuth` or `includeSsl`.

### Output (one row per domain)

```json
{
  "domain": "stripe.com", "ok": true, "resolves": true,
  "registration": {"registrar": "SafeNames Ltd.", "created": "1995-09-12T04:00:00Z", "expires": "2027-09-11T04:00:00Z",
    "domainAgeDays": 11363, "daysUntilExpiry": 324, "status": ["client transfer prohibited"], "nameservers": ["ns-1087.awsdns-07.org"], "dnssec": false},
  "dns": {"A": ["..."], "AAAA": [], "CNAME": [], "MX": ["10 aspmx.l.google.com."], "NS": ["..."], "TXT": ["v=spf1 ..."]},
  "emailAuth": {"spfRecord": "v=spf1 ... ~all", "spfAll": "~all", "dmarcPolicy": "reject", "dkimSelectorsFound": ["google", "s1"],
    "mtaSts": false, "tlsRpt": false, "score": 85, "grade": "A", "issues": []},
  "ssl": {"valid": true, "issuer": "DigiCert, Inc.", "validTo": "2026-12-10T23:59:59+00:00", "daysLeft": 50, "sans": ["stripe.com", "www.stripe.com"], "tlsVersion": "TLSv1.3"}
}
```

### FAQ

**Where does the data come from?** Registration comes from official RDAP servers (the modern replacement for WHOIS), listed by IANA. DNS comes from DNS-over-HTTPS (Cloudflare, with Google as fallback). SSL comes from a direct TLS handshake on port 443. No API keys or proxies are needed.

**Does it return owner names or emails?** No. RDAP redacts personal registrant data and this Actor doesn't collect it.

**Why is registration empty for some domains?** A few TLDs (for example .edu, .us, .co) don't offer public RDAP. You still get DNS, email and SSL results, and the reason is given in `registration.error`.

**Why does DKIM say none found?** DKIM keys sit under a selector name that can't be listed. We check 16 common selectors (Google, Microsoft 365, Mailchimp/Mandrill, Zoho, Fastmail and others). A custom selector may exist even if none is found.

**What am I charged for?** One `domain` event ($0.002) for each domain checked successfully. Invalid input, non-existent domains and lookups that fail are not charged. Set a maximum cost per run and the Actor stops cleanly when it is reached.

### Calling it from an AI agent or a script (async pattern)

A few domains finish in seconds, and 1,000 domains take a few minutes. The Apify MCP server waits only about 30–45 seconds, so for batches start the run and fetch results afterwards:

1. `POST https://api.apify.com/v2/acts/poised_beardlichen~domain-intelligence/runs` with `{"domains": [...]}`. Keep `data.id` and `data.defaultDatasetId`.
2. Poll `GET https://api.apify.com/v2/actor-runs/<runId>?waitForFinish=60` until `SUCCEEDED`.
3. `GET https://api.apify.com/v2/datasets/<defaultDatasetId>/items?clean=true`.

Send `Authorization: Bearer <APIFY_TOKEN>`. For small jobs use `POST /v2/acts/poised_beardlichen~domain-intelligence/run-sync-get-dataset-items`.

### Use in ChatGPT or Claude

Add this tool to your AI assistant as a custom connector (MCP server) with this URL:

```
https://mcp.apify.com?tools=poised_beardlichen/domain-intelligence
```

- **ChatGPT:** Settings → Apps & Connectors → Create (needs Developer mode), paste the URL, choose OAuth and sign in to Apify.
- **Claude:** Settings → Connectors → Add custom connector, paste the URL, then click Connect.

Runs go on your own Apify account at the same per-event prices, so the free plan's monthly credit applies.

### Try it free

Apify's free plan includes **$5 of usage every month, no credit card**. On this Actor that's about **2,500 domain checks** a month, so you can test it on your real data before paying anything.

### Other tools by us

- [Bulk Email Verifier & Validator](https://apify.com/poised_beardlichen/email-verifier-bulk): syntax, MX, disposable and role checks at $0.0003 per email.
- [Audio & Video Transcriber (Whisper)](https://apify.com/poised_beardlichen/audio-video-transcriber): MP3, WAV, M4A and MP4 to text, timed segments and SRT subtitles at $0.006 per audio minute.
- [Website Screenshot & PDF API](https://apify.com/poised_beardlichen/website-screenshot-pdf): bulk screenshots and PDFs of any page with cookie banners and pop-ups removed.
- [Website Screenshot & PDF for AI Agents](https://apify.com/poised_beardlichen/website-screenshot-pdf-agent): fast single-page screenshots and PDFs for agents, from $0.0015 per screenshot.
- [PDF to Text & Markdown with OCR](https://apify.com/poised_beardlichen/pdf-to-text-markdown-ocr): turn PDFs, DOCX and scans into clean, LLM-ready Markdown.
- [Image to Text OCR API](https://apify.com/poised_beardlichen/image-to-text-ocr): extract text from PNG, JPEG, TIFF and WebP images in 27 languages.
- [Bulk PageSpeed & Lighthouse Checker](https://apify.com/poised_beardlichen/pagespeed-lighthouse-checker): Lighthouse scores, Core Web Vitals and top fixes for many URLs.
- [Website Tech Stack Detector](https://apify.com/poised_beardlichen/tech-stack-detector): CMS, ecommerce, analytics, CDN and 7,600+ other technologies behind any website.
- [Research Paper Search](https://apify.com/poised_beardlichen/research-paper-search): arXiv, PubMed and Crossref papers plus legal open-access full text from $0.0015 per paper.
- [SEC EDGAR Financials & Filings](https://apify.com/poised_beardlichen/sec-edgar-financials): US company financials, filings and 10-K sections as compact JSON.
- [Website Legitimacy & Scam Check](https://apify.com/poised_beardlichen/website-legitimacy-check): domain age, SSL, look-alike brands, VAT and LEI signals at $0.008 per site.
- [Bulk Phone Number Validator](https://apify.com/poised_beardlichen/phone-number-validator): validity, E.164 format, line type and region for any number at $0.70 per 1,000.
- [Company Contact & Profile Extractor](https://apify.com/poised_beardlichen/company-contact-extractor): generic emails, phones, socials and profile from any company website at $0.004 per site.
- [UK & Australia Company Check](https://apify.com/poised_beardlichen/company-registry-check): ABN, ACN, ASIC and Companies House status and red flags from $0.003 per company.
- [Company Careers & Open Jobs Lookup](https://apify.com/poised_beardlichen/careers-jobs-lookup): open jobs from Greenhouse, Lever, Ashby and more at $0.0015 per job.

### Support

Spotted a wrong result? Open an issue on the **Issues** tab.

# Actor input Schema

## `domain` (type: `string`):

One domain, e.g. stripe.com. URLs and emails are accepted and reduced to the domain.

## `domains` (type: `array`):

List of domains, URLs or email addresses.

## `includeRegistration` (type: `boolean`):

Registrar, dates, status, nameservers.

## `includeEmailAuth` (type: `boolean`):

SPF, DMARC, DKIM common selectors, MTA-STS, grade.

## `includeSsl` (type: `boolean`):

Issuer, expiry, SANs, days left.

## `concurrency` (type: `integer`):

Domains checked in parallel.

## `maxDomains` (type: `integer`):

Cap on domains processed.

## Actor input object example

```json
{
  "domain": "stripe.com",
  "includeRegistration": true,
  "includeEmailAuth": true,
  "includeSsl": true,
  "concurrency": 10,
  "maxDomains": 10000
}
```

# Actor output Schema

## `results` (type: `string`):

No description

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "domain": "stripe.com"
};

// Run the Actor and wait for it to finish
const run = await client.actor("poised_beardlichen/domain-intelligence").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "domain": "stripe.com" }

# Run the Actor and wait for it to finish
run = client.actor("poised_beardlichen/domain-intelligence").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "domain": "stripe.com"
}' |
apify call poised_beardlichen/domain-intelligence --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,poised_beardlichen/domain-intelligence"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/7lmo2FvUKmuYElUZZ/builds/5lgbmMm9ACGTELQ1H/openapi.json