Domain Intelligence: WHOIS/RDAP, DNS, MX, SPF, DMARC & SSL Checker

One row per domain with registrar, creation/expiry date and domain age (RDAP), A/AAAA/NS/MX/TXT records, email provider detection, SPF & DMARC policy, and SSL issuer/expiry. Bulk, fast, no API keys.

Why this actor

• Everything in one row (WHOIS + DNS + email security + SSL) that competitors split across 3–4 actors; email-provider detection for B2B segmentation.
• Pay only for results: $2.50 per 1,000 domain checkeds, no start fee, failed lookups are free.
• Robust: automatic retries with exponential backoff, respects Retry-After, per-item error rows instead of crashed runs.
• Clean, flat JSON/CSV/Excel output ready for Google Sheets, Make, Zapier, n8n, Clay, or the Apify API.

Use cases

• Lead enrichment: is the prospect on Google Workspace or Microsoft 365?
• Email deliverability audits (SPF/DMARC) for agencies
• SSL / domain expiry monitoring for portfolios
• Fraud & trust checks via domain age

How to use Domain Intelligence Checker

1. Configure domains, checkSsl, checkWhois in the Input tab (or leave the prefilled sample values to test immediately).
2. Optionally set maxItems to cap the number of results and control spend.
3. Click Start and export structured results as JSON, CSV, Excel, or connect directly via API / MCP / n8n / Make.

Input

Field	Type	Description
domains	array	Domains or URLs (example.com, https://www.example.com/page).
checkSsl	boolean	Issuer, expiry date, days left, SANs.
checkWhois	boolean	Registrar, creation & expiry date, domain age.
concurrency	integer	Parallel domains.
maxItems	integer	0 = no limit.

Example input:

{
  "domains": [
    "apify.com",
    "github.com"
  ]
}

Output

Each dataset item looks like this (real sample from a test run, long fields trimmed):

{
  "domain": "apify.com",
  "a": [
    "3.170.42.68",
    "3.170.42.76",
    "3.170.42.100",
    "\u2026"
  ],
  "aaaa": [
    "2600:9000:2870:4e00:9:a03e:6540:93a1",
    "2600:9000:2870:5c00:9:a03e:6540:93a1",
    "2600:9000:2870:6000:9:a03e:6540:93a1",
    "\u2026"
  ],
  "ns": [
    "ns-449.awsdns-56.com.",
    "ns-839.awsdns-40.net.",
    "ns-1225.awsdns-25.org.",
    "\u2026"
  ],
  "mx": [
    "1 aspmx.l.google.com.",
    "5 alt1.aspmx.l.google.com.",
    "5 alt2.aspmx.l.google.com.",
    "\u2026"
  ],
  "txt": [
    "tito-domain-verification=pbg2696rvzbax2t4dl7h5ynqm",
    "openai-domain-verification=dv-WTM7Nna92Owwh4sgmDOVUyyt",
    "aisle-domain-verification-ymx7gd=j3J4hCmXHIc9R0RNQCfa8xdSf",
    "\u2026"
  ],
  "spf": "v=spf1 a mx include:_spf.google.com include:mailgun.org include:amazonses.com include:19497222.spf05.hubspotemail.net -all",
  "dmarc": "v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:dmarc-reports@apify.com; ri=604800",
  "dmarcPolicy": "reject",
  "hasMx": true,
  "emailProvider": "Google Workspace",
  "verifications": [
    "aisle-domain-verification-ymx7gd",
    "google-site-verification",
    "openai-domain-verification",
    "\u2026"
  ],
  "resolves": true,
  "sslValid": true,
  "sslIssuer": "Amazon",
  "sslExpiresAt": "2027-01-16T23:59:59+00:00",
  "sslDaysLeft": 94,
  "sslSubjectAltNames": [
    "*.apify.com",
    "apifier.com",
    "*.apifier.com",
    "\u2026"
  ],
  "registrar": "Amazon Registrar, Inc.",
  "createdAt": "2009-06-02T17:14:10Z",
  "expiresAt": "2035-06-02T17:14:10Z",
  "updatedAt": "2026-05-16T16:53:04Z",
  "domainAgeYears": 17.36,
  "status": [
    "client transfer prohibited"
  ],
  "nameserversRdap": [
    "ns-1225.awsdns-25.org",
    "ns-1928.awsdns-49.co.uk",
    "ns-449.awsdns-56.com",
    "\u2026"
  ],
  "registered": true,
  "scrapedAt": "2026-10-14T05:54:48+00:00"
}

Rows that could not be processed contain an error field and are not charged.

Extracted output fields

Every dataset row includes structured fields ready for spreadsheets, CRMs, and AI pipelines:

• Fields: domain, a, aaaa, ns, mx, txt, spf, dmarc, dmarcPolicy, hasMx, emailProvider, verifications, resolves, registered, scrapedAt

Comparison: Domain Intelligence Checker vs alternatives

Feature	This Actor (shawndunn/domain-intelligence-whois-dns-ssl)	Typical alternatives
Pricing model	$2.5 / 1,000 results, $0.00 start fee	$20–$49/mo subscription or per-run start fees
Failed / error lookups	$0.00 (never charged)	Often billed by compute time even on failures
API keys / proxies required	None (works out of the box)	Often requires paid third-party keys or residential proxies
AI Agent & MCP ready	Yes (mcp.apify.com compatible, optional defaults)	Strict required schemas that reject agent calls

Pricing

Pay-per-event: $0.0025 per domain checked (= $2.50 / 1,000). Use Max results to cap spend. Apify's free plan credit covers thousands of results per month.

Integrations & API

Run on a schedule in Apify Console, call via the Apify API / Python & JS clients, or connect to Make, Zapier, n8n, Google Sheets, Slack and webhooks. Works as a tool for AI agents via Apify MCP.

Use with AI agents (MCP)

Domain Intelligence Checker is configured for zero-config AI agent tool use via the Apify MCP Server (no required-field blocking on defaulted inputs).

Streamable HTTP endpoint:

https://mcp.apify.com/?tools=shawndunn/domain-intelligence-whois-dns-ssl

Claude Desktop / Cursor / Windsurf mcpServers config:

{
  "mcpServers": {
    "apify-domain-intelligence-whois-dns-ssl": {
      "url": "https://mcp.apify.com/?tools=shawndunn/domain-intelligence-whois-dns-ssl",
      "headers": {
        "Authorization": "Bearer <YOUR_APIFY_TOKEN>"
      }
    }
  }
}

Direct synchronous API call:

POST https://api.apify.com/v2/acts/shawndunn~domain-intelligence-whois-dns-ssl/run-sync-get-dataset-items?token=<YOUR_APIFY_TOKEN>

FAQ

Is it legal? The actor only reads publicly available data from public endpoints, without logins, and does not bypass paywalls or access controls. You are responsible for using the data in line with applicable laws (e.g. GDPR) and the source sites' terms.

Something broke? Open an issue in the Issues tab; we typically respond within 24 hours and ship fixes fast.

How do I check domain expiry dates in bulk? Paste your domain list; registrar, createdAt and expiresAt come from RDAP, the modern replacement for WHOIS.

Can I see which email provider a company uses? Yes. MX records are mapped to providers such as Google Workspace or Microsoft 365, which is useful for sales targeting and deliverability audits.

Can I monitor SSL certificate expiry? Schedule the actor weekly and alert on sslDaysLeft via a webhook or Slack integration.

More tools by shawndunn

• ATS Jobs Scraper — Scrape jobs from Greenhouse, Lever, Ashby, Workable, SmartRecruiters & Recruitee boards.
• Website Tech Stack Detector — Find what CMS, ecommerce platform, analytics, pixels and frameworks any website uses.
• Bulk PageSpeed Insights & Core Web Vitals Checker (Lighthouse) — Audit hundreds of URLs with Google PageSpeed Insights: performance, SEO, accessibility and best-practices scores, LCP, CLS, TBT ($3/1k, no start fee).
• Sitemap URL Extractor — Extract every URL from any website's XML sitemaps: auto-discovery via robots.
• Broken Link Checker & Bulk URL Status Checker — Crawl a website and test every internal and external link, or bulk-check a list of URLs (url, statusCode, ok, finalUrl) ($1/1k, no start fee).