# WHOIS Lookup & Domain Checker – Age, DNS, Email, SSL (`ram1eal/domain-intelligence`) Actor

Bulk WHOIS/RDAP lookup with domain age, registrar and expiry, DNS, email provider (Google Workspace, Microsoft 365), SPF/DMARC, SSL certificate and an explainable risk score. For fraud checks, KYB and lead qualification.

- **URL**: https://apify.com/ram1eal/domain-intelligence.md
- **Developed by:** [Hiếu Trần Quang](https://apify.com/ram1eal) (community)
- **Categories:** Developer tools, Lead generation, AI
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $2.80 / 1,000 domain results

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.
Since this Actor supports Apify Store discounts, the price gets lower the higher subscription plan you have.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## WHOIS Lookup & Domain Checker – Age, DNS, Email, SSL

Analyse thousands of domains in one run: **registrar, creation and expiry dates (RDAP/WHOIS)**, **DNS**, **email provider** (Google Workspace, Microsoft 365, …), **SPF and DMARC**, **SSL certificate** and an **explainable risk score**. Built for **fraud and KYB checks**, **B2B lead qualification**, **brand and domain portfolio monitoring** and **AI agents**.

**Try it free:** a test with 5 domains costs about $0.03 – covered by the $5 monthly credit of the free Apify plan. After that, **$4 per 1,000 domains**, no subscription.

### Why this one

- **All checks in one result.** Other tools do WHOIS *or* DNS *or* SSL. This one returns everything per domain, in one clean row.
- **Sales-ready email intelligence.** Know whether a company runs Google Workspace or Microsoft 365, and whether its email is protected (SPF, DMARC policy).
- **Explainable risk score (0–100).** Young domains, missing email security, invalid SSL, registry holds… every point comes with a named signal.
- **Monitoring mode.** "Only changed domains" returns – and charges – only domains whose registration, DNS, email or certificate changed since your last run.
- **Fast and reliable.** Standard protocols (RDAP, DNS, TLS), no website scraping, automatic retries.

### Compared with alternatives

|                                     | This Actor                            | Typical alternatives |
| ----------------------------------- | ------------------------------------- | -------------------- |
| Checks per domain                   | WHOIS/RDAP + DNS + email + SSL + risk | One check per tool   |
| Email provider (Google / Microsoft) | Yes                                   | Rarely               |
| Explainable risk score              | Yes, with named signals               | No                   |
| Monitoring                          | Only changed domains are charged      | No                   |

### What you get

- Status: **registered** or **available**
- Registrar, IANA ID, created / updated / expiry dates, **age in days**, days until expiry, registry status, nameservers, DNSSEC
- Registrant organisation and country when published (never personal names, e-mails or phones)
- IPv4/IPv6, MX records, **email provider**, SPF record, DMARC policy
- SSL issuer, validity dates, days left, validity
- **Risk score** and **risk signals**

### Sample output

```json
{
  "domain": "apify.com",
  "status": "registered",
  "registrar": "Amazon Registrar, Inc.",
  "createdAt": "2009-06-02T17:14:10Z",
  "expiresAt": "2035-06-02T17:14:10Z",
  "ageDays": 6348,
  "dnssec": true,
  "mx": ["aspmx.l.google.com", "alt1.aspmx.l.google.com"],
  "emailProvider": "Google Workspace",
  "hasSpf": true,
  "hasDmarc": true,
  "dmarcPolicy": "reject",
  "sslIssuer": "Amazon",
  "sslValid": true,
  "riskScore": 0,
  "riskSignals": []
}
```

### How to use

1. Paste domains, website URLs or e-mail addresses (one per line) – the domain is extracted automatically.
2. Keep all checks or pick the ones you need (same price).
3. Click Start. Export to JSON, CSV or Excel, or call it from your app or AI agent.

### Use cases

- **Fraud & KYB:** flag brand-new domains, missing email security or invalid certificates before onboarding a customer or supplier.
- **Lead qualification:** segment prospects by email provider (Google Workspace vs Microsoft 365) and domain age.
- **Portfolio monitoring:** schedule daily with "Only changed domains" to catch expiring domains, DNS changes and certificate renewals.
- **Domain availability:** check which names are still unregistered.
- **AI agents:** "Is supplier-example.com a new domain?" via the Apify MCP server.

### Risk signals

| Signal                     | Points |
| -------------------------- | ------ |
| domain_age_under_30_days   | 40     |
| domain_age_under_180_days  | 20     |
| registry_hold              | 40     |
| does_not_resolve           | 25     |
| expires_within_30_days     | 15     |
| no_mx_records              | 15     |
| ssl_invalid_or_missing     | 15     |
| no_spf                     | 10     |
| no_dmarc                   | 10     |
| dmarc_policy_none          | 5      |
| ssl_expires_within_14_days | 5      |

The score is the sum, capped at 100.

### Pricing

Pay per domain, all checks included, platform usage included:

| Apify plan | Per 1,000 domains | Per run |
| ---------- | ----------------- | ------- |
| Free       | $4.00             | $0.005  |
| Starter    | $3.70             | $0.005  |
| Scale      | $3.30             | $0.005  |
| Business   | $2.80             | $0.005  |

Unchanged domains in "only changed domains" mode are free.

### Cost examples

- 100 domains: $0.40
- Screen 10,000 sign-up domains: $28–40

### Data sourcing & privacy

- Registration data comes from **RDAP**, the official ICANN successor of WHOIS, via the IANA bootstrap registry. A few country domains (e.g. .de) have no public RDAP: DNS, email and SSL checks still run and the gap is reported in `checkErrors`.
- DNS via public resolvers; SSL via a standard TLS handshake. No website content is downloaded.
- Registrant personal data (names, e-mails, phone numbers, street addresses) is never collected.

### FAQ

- **Is this the same as WHOIS?** RDAP is the modern, structured replacement for WHOIS operated by the same registries.
- **Why is the registrant often missing?** Most registries redact registrant data for privacy; only organisations that publish it are shown.
- **What if something breaks?** Open an issue – typical response under 12 hours.

### More tools from this author

- [Tech Stack Detector – BuiltWith & Wappalyzer Alternative](https://apify.com/ram1eal/website-tech-stack) – 3,500+ technologies per website, plus the email provider
- [Contact Info Scraper – Company Emails, Phones & Socials](https://apify.com/ram1eal/company-contact-finder) – company e-mails, phones and social profiles, GDPR-safe
- [Companies House API & Company Registry – UK, France, LEI](https://apify.com/ram1eal/company-registry-search) – UK Companies House, France SIRENE & LEI search with a KYB risk score
- [Public Tenders – EU TED & UK Find a Tender Procurement](https://apify.com/ram1eal/public-tenders-search) – EU TED & UK Find a Tender notices with daily alerts
- [Shopify Scraper – Products, Prices, Stock & Price Monitor](https://apify.com/ram1eal/shopify-store-products) – any Shopify store: products, prices, stock, price-drop alerts
- [Impressum Scraper – German Company Data, HRB & VAT Check](https://apify.com/ram1eal/company-imprint) – German/Austrian/Swiss company data from the Impressum, VAT checked
- [SEC EDGAR API – Company Financials, 10-K Data & Filings](https://apify.com/ram1eal/sec-company-financials) – SEC EDGAR financials and 10-K/10-Q/8-K filings by ticker
- [SAM.gov & USAspending – US Federal Contracts & Awards](https://apify.com/ram1eal/us-federal-contracts) – new US federal contract awards and SAM.gov opportunities
- [Startup Funding Rounds – Crunchbase Alternative (SEC Form D)](https://apify.com/ram1eal/startup-funding-rounds) – US startups raising money, daily from SEC Form D

### Need custom data?

Need bulk lists, other TLDs or a custom risk model? Open an issue describing what you need.

### Input reference

| Field      | Type    | Default | Description                                 |
| ---------- | ------- | ------- | ------------------------------------------- |
| `domains`  | array   | –       | Domains, URLs or e-mail addresses           |
| `checks`   | array   | all     | `registration`, `dns`, `email`, `ssl`       |
| `maxItems` | integer | 1000    | Maximum domains to analyse                  |
| `onlyNew`  | boolean | false   | Only domains changed since the previous run |
| `stateKey` | string  | –       | History name for only-changed mode          |

### Changelog

- 0.1 – RDAP registration, DNS, email provider, SPF/DMARC, SSL, risk score, only-changed mode.

### Use it from code, n8n or AI agents

Run it from the Apify API, the Python or JavaScript client, n8n, Make or Zapier – or let an AI agent call it through the **Apify MCP server** (Claude, ChatGPT, Cursor).

```python
from apify_client import ApifyClient

client = ApifyClient("<YOUR_APIFY_TOKEN>")
run = client.actor("ram1eal/domain-intelligence").call(run_input={"domains":["apify.com","example.com"]})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)
```

```javascript
import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: '<YOUR_APIFY_TOKEN>' });
const run = await client
  .actor('ram1eal/domain-intelligence')
  .call({ domains: ['apify.com', 'example.com'] });
const { items } = await client.dataset(run.defaultDatasetId).listItems();
```

**MCP:** add `ram1eal/domain-intelligence` to the Apify MCP server and ask in plain English – the agent fills the input and pays per result.

# Actor input Schema

## `domains` (type: `array`):

Domains, website URLs or e-mail addresses (the domain is extracted), one per line.

## `checks` (type: `array`):

Which checks to run. All are included in the price.

## `maxItems` (type: `integer`):

Stop after this many domains. You pay per domain.

## `onlyNew` (type: `boolean`):

For scheduled monitoring: return (and pay for) only domains whose registration, DNS, email or certificate data changed since your previous run with the same list.

## `stateKey` (type: `string`):

Runs with the same history name share what was already delivered. Leave empty to use one history per list.

## Actor input object example

```json
{
  "domains": [
    "apify.com",
    "airbus.com",
    "bbc.co.uk"
  ],
  "checks": [
    "registration",
    "dns",
    "email",
    "ssl"
  ],
  "maxItems": 100,
  "onlyNew": false
}
```

# Actor output Schema

## `results` (type: `string`):

One record per domain: status (registered/available), registrar, creation/expiry dates and age, registry status, nameservers, DNSSEC, IPs, MX, email provider, SPF, DMARC policy, SSL issuer and validity, risk score (0–100) with explainable risk signals. Registrant personal data is never included.

## `runSummary` (type: `string`):

JSON summary of the run: lookups made, domains delivered and charged, domains skipped as unchanged (only-changed mode) and error counts.

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "domains": [
        "apify.com",
        "airbus.com",
        "bbc.co.uk"
    ],
    "maxItems": 100
};

// Run the Actor and wait for it to finish
const run = await client.actor("ram1eal/domain-intelligence").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = {
    "domains": [
        "apify.com",
        "airbus.com",
        "bbc.co.uk",
    ],
    "maxItems": 100,
}

# Run the Actor and wait for it to finish
run = client.actor("ram1eal/domain-intelligence").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "domains": [
    "apify.com",
    "airbus.com",
    "bbc.co.uk"
  ],
  "maxItems": 100
}' |
apify call ram1eal/domain-intelligence --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,ram1eal/domain-intelligence"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/k2bW9rFVlkil4VFW6/builds/LhySShfkqabeKZMoe/openapi.json