Bulk Domain WHOIS / RDAP Lookup, DNS & Email Security Checker

Look up thousands of domains at once. For each one you get availability, registrar, creation, update and expiry dates, EPP status, nameservers and DNSSEC, all from the registry's official RDAP service (ICANN's modern replacement for WHOIS), with a port-43 WHOIS fallback for ccTLDs that don't offer RDAP yet. Add DNS records and an email security audit (mail provider, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, BIMI, with a 0–100 score and a list of issues). $1 per 1,000 domains.

• ✅ Availability check for name ideas: available: true when the registry has no registration
• ✅ Registrar, IANA ID, abuse contact, created_at, expires_at, days_to_expiry, domain_age_days
• ✅ 1,200+ TLDs via the IANA RDAP bootstrap, plus .de, .io, .ch, .me and WHOIS for .eu, .it, .co, .jp, .at, .be, .se, .dk…
• ✅ DNS over HTTPS: A, AAAA, MX, NS, TXT, CNAME, CAA, SOA
• ✅ Mail provider detection: Google Workspace, Microsoft 365, Proofpoint, Mimecast, Zoho, Fastmail and 30 more
• ✅ SPF / DMARC / DKIM audit with plain-English issues ("DMARC policy is p=none", "SPF ends with +all")
• ✅ Change monitor: output only domains whose registrar, expiry, status, nameservers, MX, SPF or DMARC changed
• ✅ Filters: only available domains, only domains expiring within N days
• ✅ Paste URLs, www. hosts, subdomains or IDNs, and they're cleaned up automatically. One bad domain never fails the run.

Input example

{
  "domains": [
    "github.com",
    "apify.com",
    "bbc.co.uk",
    "spiegel.de",
    "my-startup-idea.io"
  ],
  "lookupRegistration": true,
  "whoisFallback": true,
  "dnsRecordTypes": [
    "A",
    "AAAA",
    "MX",
    "NS",
    "TXT"
  ],
  "emailSecurity": true,
  "onlyAvailable": false,
  "expiringWithinDays": 0,
  "onlyChanged": false
}

Output example (real run)

A registered domain (long lists shortened):

{
  "domain": "github.com",
  "input": "github.com",
  "host": null,
  "tld": "com",
  "registered": true,
  "available": false,
  "lookup_source": "rdap",
  "registry_server": "https://rdap.verisign.com/com/v1/",
  "registrar": "MarkMonitor Inc.",
  "registrar_iana_id": "292",
  "registrar_abuse_email": "abusecomplaints@markmonitor.com",
  "created_at": "2007-10-09T18:20:50Z",
  "updated_at": "2026-09-07T09:22:52Z",
  "expires_at": "2028-10-09T18:20:50Z",
  "days_to_expiry": 718,
  "domain_age_days": 6953,
  "status": [
    "client delete prohibited",
    "client transfer prohibited",
    "client update prohibited"
  ],
  "nameservers": [
    "dns1.p08.nsone.net",
    "dns2.p08.nsone.net",
    "dns3.p08.nsone.net",
    "…"
  ],
  "dnssec": false,
  "registrant_org": null,
  "registrant_country": null,
  "dns": {
    "A": [
      "140.82.114.3"
    ],
    "AAAA": [],
    "MX": [
      "0 github-com.mail.protection.outlook.com"
    ],
    "NS": [
      "dns1.p08.nsone.net",
      "dns2.p08.nsone.net",
      "dns3.p08.nsone.net",
      "dns4.p08.nsone.net",
      "ns-1283.awsdns-32.org",
      "ns-1707.awsdns-21.co.uk",
      "ns-421.awsdns-52.com",
      "ns-520.awsdns-01.net"
    ],
    "TXT": [
      "00Dd0000000hHE0=1TBKg000000TN2r",
      "MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805",
      "MS=ms44452932",
      "…"
    ]
  },
  "has_website_ip": true,
  "mx_hosts": [
    "github-com.mail.protection.outlook.com"
  ],
  "mail_provider": "Microsoft 365",
  "email_security": {
    "spf": {
      "present": true,
      "record": "v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all",
      "all": "softfail",
      "includes": [
        "spf.protection.outlook.com",
        "_netblocks.google.com",
        "_netblocks2.google.com",
        "…"
      ],
      "dns_lookups": 8,
      "multiple_records": false
    },
    "dmarc": {
      "present": true,
      "record": "v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1",
      "policy": "quarantine",
      "subdomain_policy": "reject",
      "pct": 100,
      "rua": [
        "mailto:dmarc@github.com"
      ],
      "ruf": [
        "mailto:dmarc@github.com"
      ]
    },
    "dkim_selectors_found": [
      "google",
      "selector1",
      "k1",
      "s1",
      "s2"
    ],
    "mta_sts": null,
    "tls_rpt": null,
    "bimi": null,
    "score": 90,
    "issues": []
  },
  "scraped_at": "2026-10-21T19:03:26Z"
}

An unregistered domain:

{
  "domain": "thisdomainisprobablyfree-1729.com",
  "registered": false,
  "available": true,
  "availability_note": "No registration found in the registry. It may still be reserved, premium-priced or blocked by the registry.",
  "lookup_source": "rdap",
  "registry_server": "https://rdap.verisign.com/com/v1/"
}

Use the Domains and Email security dataset views, or export CSV or Excel. The OUTPUT record holds counts (registered, unregistered, filtered, unchanged), the WHOIS servers used and the inputs that failed or were invalid.

Pricing

Pay per event, no subscription:

Event	Price
Domain result (registration data + DNS for one domain)	$0.001 ($1 per 1,000)
Email security check (add-on, only when enabled)	$0.0005 ($0.50 per 1,000)
Actor start (per run)	$0.002

For example, 10,000 domains with the email audit cost about $15, or $10 without it. Invalid domains and failed lookups are never charged, and you can set a maximum cost per run.

Use cases

• Domain name ideas: check hundreds of names for availability across TLDs in one run.
• Portfolio and brand monitoring: expiry dates, registrar or nameserver changes, and lookalike domains.
• Lead enrichment and sales: mail provider (Google vs Microsoft), domain age and registrar for a list of company domains.
• Email deliverability and security audits: find domains without DMARC or with weak SPF.
• Security and OSINT: newly changed nameservers or MX records on watched domains.

FAQ

What is RDAP? The Registration Data Access Protocol is ICANN's standardised, JSON-based successor to WHOIS. Registries publish it as an official public service. The Actor finds the right RDAP server for each TLD through IANA's bootstrap file and queries the registry directly.

Why are registrant names missing? Since GDPR most registries and registrars redact personal registrant data. You get the registrant organisation and country only where the registry publishes them (for example many .fr, .io and .uk organisations). Turn on followRegistrarRdap for .com/.net to also ask the registrar's RDAP server.

Some ccTLDs have no expiry date. Registries such as DENIC (.de), SIDN (.nl) and SWITCH (.ch) don't publish expiry dates. A few registries (for example .es and .pt) don't offer open WHOIS access at all. In that case the domain is still reported as registered from its DNS delegation, and registration_error explains what happened.

Is "available" guaranteed? It means the registry has no registration. Some names are still reserved, premium-priced or blocked by registry policy, so check with a registrar before you buy.

How does the change monitor work? With onlyChanged, each domain's key fields are saved in a named key-value store. Later runs output only domains that changed, with a changes list and the previous values. The first run outputs everything.