# Domain Checker: WHOIS/RDAP, DNS, MX, SPF, DMARC & SSL (`shawndunn/domain-intelligence-whois-dns-ssl`) Actor One row per domain with registrar, creation/expiry date and domain age (RDAP), A/AAAA/NS/MX/TXT records, email provider detection, SPF & DMARC policy, and SSL issuer/expiry. Bulk, fast, no API keys. - **URL**: https://apify.com/shawndunn/domain-intelligence-whois-dns-ssl.md - **Developed by:** [CarrierDaily](https://apify.com/shawndunn) (community) - **Categories:** Developer tools, Lead generation - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks - **User rating**: No ratings yet ## Pricing $2.50 / 1,000 domain checkeds This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event ## What's an Apify Actor? An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md. ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run. For examples already wired to this Actor's own input schema, see the [API](#api) section below. Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`). # README ## Domain Intelligence: WHOIS/RDAP, DNS, MX, SPF, DMARC & SSL Checker One row per domain with registrar, creation/expiry date and domain age (RDAP), A/AAAA/NS/MX/TXT records, email provider detection, SPF & DMARC policy, and SSL issuer/expiry. Bulk, fast, no API keys. ### Why this actor - Everything in one row (WHOIS + DNS + email security + SSL) that competitors split across 3–4 actors; email-provider detection for B2B segmentation. - Pay only for results: **$2.50 per 1,000 domain checkeds**, no start fee, failed lookups are free. - Robust: automatic retries with exponential backoff, respects `Retry-After`, per-item error rows instead of crashed runs. - Clean, flat JSON/CSV/Excel output ready for Google Sheets, Make, Zapier, n8n, Clay, or the Apify API. ### Use cases - Lead enrichment: is the prospect on Google Workspace or Microsoft 365? - Email deliverability audits (SPF/DMARC) for agencies - SSL / domain expiry monitoring for portfolios - Fraud & trust checks via domain age ### How to use Domain Intelligence Checker 1. Enter domains (e.g. `apify.com`, `github.com`). URLs are fine too; the domain is extracted. 2. Toggle SSL and WHOIS checks if you only need DNS. 3. Click **Start** and get one row per domain, ready for CSV, Excel or your CRM. ### Input | Field | Type | Description | |---|---|---| | `domains` | array | Domains or URLs (example.com, https://www.example.com/page). | | `checkSsl` | boolean | Issuer, expiry date, days left, SANs. | | `checkWhois` | boolean | Registrar, creation & expiry date, domain age. | | `concurrency` | integer | Parallel domains. | | `maxItems` | integer | 0 = no limit. | Example input: ```json { "domains": [ "apify.com", "github.com" ] } ``` ### Output Each dataset item looks like this (real sample from a test run, long fields trimmed): ```json { "domain": "apify.com", "a": [ "3.170.42.68", "3.170.42.76", "3.170.42.100", "\u2026" ], "aaaa": [ "2600:9000:2870:4e00:9:a03e:6540:93a1", "2600:9000:2870:5c00:9:a03e:6540:93a1", "2600:9000:2870:6000:9:a03e:6540:93a1", "\u2026" ], "ns": [ "ns-449.awsdns-56.com.", "ns-839.awsdns-40.net.", "ns-1225.awsdns-25.org.", "\u2026" ], "mx": [ "1 aspmx.l.google.com.", "5 alt1.aspmx.l.google.com.", "5 alt2.aspmx.l.google.com.", "\u2026" ], "txt": [ "tito-domain-verification=pbg2696rvzbax2t4dl7h5ynqm", "openai-domain-verification=dv-WTM7Nna92Owwh4sgmDOVUyyt", "aisle-domain-verification-ymx7gd=j3J4hCmXHIc9R0RNQCfa8xdSf", "\u2026" ], "spf": "v=spf1 a mx include:_spf.google.com include:mailgun.org include:amazonses.com include:19497222.spf05.hubspotemail.net -all", "dmarc": "v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:dmarc-reports@apify.com; ri=604800", "dmarcPolicy": "reject", "hasMx": true, "emailProvider": "Google Workspace", "verifications": [ "aisle-domain-verification-ymx7gd", "google-site-verification", "openai-domain-verification", "\u2026" ], "resolves": true, "sslValid": true, "sslIssuer": "Amazon", "sslExpiresAt": "2027-01-16T23:59:59+00:00", "sslDaysLeft": 94, "sslSubjectAltNames": [ "*.apify.com", "apifier.com", "*.apifier.com", "\u2026" ], "registrar": "Amazon Registrar, Inc.", "createdAt": "2009-06-02T17:14:10Z", "expiresAt": "2035-06-02T17:14:10Z", "updatedAt": "2026-05-16T16:53:04Z", "domainAgeYears": 17.36, "status": [ "client transfer prohibited" ], "nameserversRdap": [ "ns-1225.awsdns-25.org", "ns-1928.awsdns-49.co.uk", "ns-449.awsdns-56.com", "\u2026" ], "registered": true, "scrapedAt": "2026-10-14T05:54:48+00:00" } ``` Rows that could not be processed contain an `error` field and are **not charged**. ### Comparison: Domain Intelligence Checker vs alternatives | | This actor | Typical alternatives | |---|---|---| | Checks per row | WHOIS/RDAP + DNS + MX + SPF + DMARC + SSL | Usually one check per tool | | API keys | None | WHOIS APIs need paid keys | | Bulk | Thousands per run | Web tools: one at a time | | Pricing | $2.50 / 1,000 domains | Per-lookup credits or subscription | ### Pricing Pay-per-event: **$0.0025** per domain checked (= $2.50 / 1,000). Use **Max results** to cap spend. Apify's free plan credit covers thousands of results per month. ### Integrations & API Run on a schedule in Apify Console, call via the Apify API / Python & JS clients, or connect to Make, Zapier, n8n, Google Sheets, Slack and webhooks. Works as a tool for AI agents via Apify MCP. ### Use with AI agents (MCP) Domain Intelligence Checker is a ready-made tool for AI agents (bulk WHOIS lookup, DNS lookup, MX and SSL checker). Connect it to Claude, ChatGPT, Cursor, VS Code or any MCP client with the Apify MCP server: ``` https://mcp.apify.com/?tools=shawndunn/domain-intelligence-whois-dns-ssl ``` Agents can also call it directly via the Apify API (`POST https://api.apify.com/v2/acts/shawndunn~domain-intelligence-whois-dns-ssl/run-sync-get-dataset-items`) and pay per result, with no subscription. ### FAQ **Is it legal?** The actor only reads publicly available data from public endpoints, without logins, and does not bypass paywalls or access controls. You are responsible for using the data in line with applicable laws (e.g. GDPR) and the source sites' terms. **Something broke?** Open an issue in the Issues tab; we typically respond within 24 hours and ship fixes fast. **How do I check domain expiry dates in bulk?** Paste your domain list; `registrar`, `createdAt` and `expiresAt` come from RDAP, the modern replacement for WHOIS. **Can I see which email provider a company uses?** Yes. MX records are mapped to providers such as Google Workspace or Microsoft 365, which is useful for sales targeting and deliverability audits. **Can I monitor SSL certificate expiry?** Schedule the actor weekly and alert on `sslDaysLeft` via a webhook or Slack integration. ### More tools by shawndunn - [ATS Jobs Scraper](https://apify.com/shawndunn/ats-jobs-scraper) - Scrape jobs from Greenhouse, Lever, Ashby, Workable, SmartRecruiters & Recruitee boards. - [Website Tech Stack Detector](https://apify.com/shawndunn/website-tech-stack-detector) - Find what CMS, ecommerce platform, analytics, pixels and frameworks any website uses. - [Sitemap URL Extractor](https://apify.com/shawndunn/sitemap-url-extractor) - Extract every URL from any website's XML sitemaps: auto-discovery via robots. - [Apple App Store Scraper](https://apify.com/shawndunn/apple-app-store-search-details) - Scrape Apple App Store search results, app details, ratings, prices and developer apps in any country. # Actor input Schema ## `domains` (type: `array`): Domains or URLs (example.com, https://www.example.com/page). ## `checkSsl` (type: `boolean`): Issuer, expiry date, days left, SANs. ## `checkWhois` (type: `boolean`): Registrar, creation & expiry date, domain age. ## `concurrency` (type: `integer`): Parallel domains. ## `maxItems` (type: `integer`): 0 = no limit. ## Actor input object example ```json { "domains": [ "apify.com", "github.com" ], "checkSsl": true, "checkWhois": true, "concurrency": 8, "maxItems": 0 } ``` # Actor output Schema ## `results` (type: `string`): All dataset items # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "domains": [ "apify.com", "github.com" ] }; // Run the Actor and wait for it to finish const run = await client.actor("shawndunn/domain-intelligence-whois-dns-ssl").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "domains": [ "apify.com", "github.com", ] } # Run the Actor and wait for it to finish run = client.actor("shawndunn/domain-intelligence-whois-dns-ssl").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}") for item in client.dataset(run.default_dataset_id).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "domains": [ "apify.com", "github.com" ] }' | apify call shawndunn/domain-intelligence-whois-dns-ssl --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "type": "http", "url": "https://mcp.apify.com/?tools=fetch-actor-details,shawndunn/domain-intelligence-whois-dns-ssl" } } } ``` The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer ` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations). ## OpenAPI specification Download the OpenAPI definition: https://api.apify.com/v2/actors/hVQYa1PiBZgA3DNJz/builds/HpvZWpZwzl81rLlTB/openapi.json