WHOIS Lookup & Domain Checker – Age, DNS, Email, SSL

Analyse thousands of domains in one run: registrar, creation and expiry dates (RDAP/WHOIS), DNS, email provider (Google Workspace, Microsoft 365, …), SPF and DMARC, SSL certificate and an explainable risk score. Built for fraud and KYB checks, B2B lead qualification, brand and domain portfolio monitoring and AI agents.

Try it free: a test with 5 domains costs about $0.03 – covered by the $5 monthly credit of the free Apify plan. After that, $4 per 1,000 domains, no subscription.

Why this one

• All checks in one result. Other tools do WHOIS or DNS or SSL. This one returns everything per domain, in one clean row.
• Sales-ready email intelligence. Know whether a company runs Google Workspace or Microsoft 365, and whether its email is protected (SPF, DMARC policy).
• Explainable risk score (0–100). Young domains, missing email security, invalid SSL, registry holds… every point comes with a named signal.
• Monitoring mode. "Only changed domains" returns – and charges – only domains whose registration, DNS, email or certificate changed since your last run.
• Fast and reliable. Standard protocols (RDAP, DNS, TLS), no website scraping, automatic retries.

Compared with alternatives

	This Actor	Typical alternatives
Checks per domain	WHOIS/RDAP + DNS + email + SSL + risk	One check per tool
Email provider (Google / Microsoft)	Yes	Rarely
Explainable risk score	Yes, with named signals	No
Monitoring	Only changed domains are charged	No

What you get

• Status: registered or available
• Registrar, IANA ID, created / updated / expiry dates, age in days, days until expiry, registry status, nameservers, DNSSEC
• Registrant organisation and country when published (never personal names, e-mails or phones)
• IPv4/IPv6, MX records, email provider, SPF record, DMARC policy
• SSL issuer, validity dates, days left, validity
• Risk score and risk signals

Sample output

{
  "domain": "apify.com",
  "status": "registered",
  "registrar": "Amazon Registrar, Inc.",
  "createdAt": "2009-06-02T17:14:10Z",
  "expiresAt": "2035-06-02T17:14:10Z",
  "ageDays": 6348,
  "dnssec": true,
  "mx": ["aspmx.l.google.com", "alt1.aspmx.l.google.com"],
  "emailProvider": "Google Workspace",
  "hasSpf": true,
  "hasDmarc": true,
  "dmarcPolicy": "reject",
  "sslIssuer": "Amazon",
  "sslValid": true,
  "riskScore": 0,
  "riskSignals": []
}

How to use

1. Paste domains, website URLs or e-mail addresses (one per line) – the domain is extracted automatically.
2. Keep all checks or pick the ones you need (same price).
3. Click Start. Export to JSON, CSV or Excel, or call it from your app or AI agent.

Use cases

• Fraud & KYB: flag brand-new domains, missing email security or invalid certificates before onboarding a customer or supplier.
• Lead qualification: segment prospects by email provider (Google Workspace vs Microsoft 365) and domain age.
• Portfolio monitoring: schedule daily with "Only changed domains" to catch expiring domains, DNS changes and certificate renewals.
• Domain availability: check which names are still unregistered.
• AI agents: "Is supplier-example.com a new domain?" via the Apify MCP server.

Risk signals

Signal	Points
domain_age_under_30_days	40
domain_age_under_180_days	20
registry_hold	40
does_not_resolve	25
expires_within_30_days	15
no_mx_records	15
ssl_invalid_or_missing	15
no_spf	10
no_dmarc	10
dmarc_policy_none	5
ssl_expires_within_14_days	5

The score is the sum, capped at 100.

Pricing

Pay per domain, all checks included, platform usage included:

Apify plan	Per 1,000 domains	Per run
Free	$4.00	$0.005
Starter	$3.70	$0.005
Scale	$3.30	$0.005
Business	$2.80	$0.005

Unchanged domains in "only changed domains" mode are free.

Cost examples

• 100 domains: $0.40
• Screen 10,000 sign-up domains: $28–40

Data sourcing & privacy

• Registration data comes from RDAP, the official ICANN successor of WHOIS, via the IANA bootstrap registry. A few country domains (e.g. .de) have no public RDAP: DNS, email and SSL checks still run and the gap is reported in checkErrors.
• DNS via public resolvers; SSL via a standard TLS handshake. No website content is downloaded.
• Registrant personal data (names, e-mails, phone numbers, street addresses) is never collected.

FAQ

• Is this the same as WHOIS? RDAP is the modern, structured replacement for WHOIS operated by the same registries.
• Why is the registrant often missing? Most registries redact registrant data for privacy; only organisations that publish it are shown.
• What if something breaks? Open an issue – typical response under 12 hours.

More tools from this author

• Tech Stack Detector – BuiltWith & Wappalyzer Alternative – 3,500+ technologies per website, plus the email provider
• Contact Info Scraper – Company Emails, Phones & Socials – company e-mails, phones and social profiles, GDPR-safe
• Companies House API & Company Registry – UK, France, LEI – UK Companies House, France SIRENE & LEI search with a KYB risk score
• Public Tenders – EU TED & UK Find a Tender Procurement – EU TED & UK Find a Tender notices with daily alerts
• Shopify Scraper – Products, Prices, Stock & Price Monitor – any Shopify store: products, prices, stock, price-drop alerts
• Impressum Scraper – German Company Data, HRB & VAT Check – German/Austrian/Swiss company data from the Impressum, VAT checked
• SEC EDGAR API – Company Financials, 10-K Data & Filings – SEC EDGAR financials and 10-K/10-Q/8-K filings by ticker
• SAM.gov & USAspending – US Federal Contracts & Awards – new US federal contract awards and SAM.gov opportunities
• Startup Funding Rounds – Crunchbase Alternative (SEC Form D) – US startups raising money, daily from SEC Form D

Need custom data?

Need bulk lists, other TLDs or a custom risk model? Open an issue describing what you need.

Input reference

Field	Type	Default	Description
domains	array	–	Domains, URLs or e-mail addresses
checks	array	all	registration, dns, email, ssl
maxItems	integer	1000	Maximum domains to analyse
onlyNew	boolean	false	Only domains changed since the previous run
stateKey	string	–	History name for only-changed mode

Changelog

• 0.1 – RDAP registration, DNS, email provider, SPF/DMARC, SSL, risk score, only-changed mode.

Use it from code, n8n or AI agents

Run it from the Apify API, the Python or JavaScript client, n8n, Make or Zapier – or let an AI agent call it through the Apify MCP server (Claude, ChatGPT, Cursor).

from apify_client import ApifyClient

client = ApifyClient("<YOUR_APIFY_TOKEN>")
run = client.actor("ram1eal/domain-intelligence").call(run_input={"domains":["apify.com","example.com"]})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: '<YOUR_APIFY_TOKEN>' });
const run = await client
  .actor('ram1eal/domain-intelligence')
  .call({ domains: ['apify.com', 'example.com'] });
const { items } = await client.dataset(run.defaultDatasetId).listItems();

MCP: add ram1eal/domain-intelligence to the Apify MCP server and ask in plain English – the agent fills the input and pays per result.