# Changelog of SiteVerdict — Domain & IP RDAP Lookup + Expiry Alerts (`siteverdict/siteverdict-domain-rdap-lookup`) Actor

- **URL**: https://apify.com/siteverdict/siteverdict-domain-rdap-lookup/changelog.md
- **Full Actor documentation**: https://apify.com/siteverdict/siteverdict-domain-rdap-lookup.md

## Changelog

### Unreleased (NEXT5 prep, 17 Oct 2026)

- DNS pinning: RDAP, registrar-RDAP and webhook requests now connect only to the address that passed the private-network check (shared pinned transport), closing the DNS-rebinding window.
- A redirect from the IANA bootstrap host to another origin now gets the full private-network checks.
- Webhook and Slack URLs are checked when the run starts (public https on port 443 only); delivery errors are fixed texts that never repeat the webhook host.
- A malformed registrar link in a registry response no longer stops the run.
- README: run time, aborts and partial results.

### 1.0.0 (11 Oct 2026)

- First release: bulk domain and IP lookups via the official RDAP services from the IANA bootstrap registry (RFC 9224 / RFC 9083).
- Registrar (name, IANA ID, abuse contact), creation/expiry/last-changed/transfer dates, EPP status flags, nameservers, DNSSEC, RFC 9537 redactions.
- Expiry, hold, pending-delete and missing transfer-lock alerts; Slack/webhook delivery.
- Monitor mode with change detection (registrar, expiry, status, nameservers, DNSSEC).
- Lookalike/typosquat watch for the user's own domains using per-domain RDAP checks only.
- Per-server politeness queue, Retry-After handling, SSRF guard, personal data never output.