Domain Intelligence Lookup: WHOIS/RDAP, DNS, subdomains, SSL and security headers at $0.002 per domain

Price per 1,000 domains	Free plan	Starter	Scale	Business
This Actor	$2.00	$2.00	$2.00	$2.00

Video walkthrough: Watch the 1-minute demo on YouTube

• In short: Domain Intelligence Lookup (Apify actor transparent_meteorite/domain-intelligence-lookup) looks up registration, DNS, email-security, subdomain, SSL and HTTP security-header facts for a list of domains from public protocols.
• Who it is for: security and IT teams, email deliverability consultants, domain investors, sales teams qualifying accounts.
• Input: a list of domains, max domains, include subdomains, max subdomains, check SSL, check headers.
• Output: registrar, creation and expiry dates, domain age, nameservers, A/AAAA/MX/NS/TXT records, parsed SPF and DMARC, subdomains, SSL issuer and expiry, security headers.
• Price: $0.002 per domain plus $0.00005 per run start. Pay per result, no subscription; Apify's free plan credit covers a first test.
• Limits: RDAP data depends on the registry (some ccTLDs return little); subdomains are only those seen in certificate transparency logs.

Key facts

• Actor name: Domain Intelligence Lookup
• Actor ID: transparent_meteorite/domain-intelligence-lookup
• Store page: https://apify.com/transparent_meteorite/domain-intelligence-lookup
• Data source: RDAP, DNS over HTTPS, certificate transparency logs and the live site
• Pricing model: pay per event (apify-actor-start $0.00005, domain-looked-up $0.002)
• Output formats: JSON, CSV, Excel, XML, HTML table, RSS (Apify dataset)
• Access: Apify Console, REST API, JavaScript/Python clients, schedules, webhooks, Apify MCP server
• Login or third-party API key needed: no, only an Apify account
• Also known as: WHOIS API, bulk domain lookup, DMARC checker, SPF record checker, subdomain finder, SSL expiry checker
• Maintainer: transparent_meteorite (independent developer)
• Last updated: 2026-10-07

Paste a list of domains; get registration data, DNS records with SPF and DMARC parsed, subdomains from certificate transparency, the TLS certificate and HTTP security headers, one row per domain.

Everything comes from public protocols: RDAP (the WHOIS successor), DNS over HTTPS (Cloudflare, Google as fallback), public certificate transparency logs (crt.sh, Cert Spotter as fallback), a TLS handshake on port 443 and one HTTPS request to the homepage. No API keys, no browser, no proxies. A section that fails (for example crt.sh timing out) is reported in the row's errors field and never fails the whole row.

Run in 30 seconds

1. Open the prefilled run (free Apify account; it creates a saved task with a working input).
2. Press Start. The input is small on purpose, so the first run is quick and costs a few cents at most.
3. Open the Output tab, switch to Table view, download as CSV, Excel or JSON.

Prefilled input:

{
  "domains": [
    "apify.com",
    "github.com",
    "example.com"
  ],
  "maxDomains": 3,
  "includeSubdomains": true,
  "maxSubdomains": 5,
  "checkSsl": true,
  "checkHeaders": true
}

Ready-made presets by use case (each opens as a saved task you can edit):

• Vendor security posture check
• Subdomain attack surface map

Why choose this over alternatives

• RDAP registration, DNS over HTTPS (A, AAAA, MX, NS, TXT), SPF and DMARC parsed, subdomains, SSL expiry and HTTP security headers in one row per domain.
• Subdomain lookup has a second certificate-transparency source: when the first one failed in testing, the fallback returned subdomains for 5 of 5 domains.
• 94 automated tests pass, including live checks on real domains.
• $0.002 per domain.

Check	This actor
Automated tests on the current build	94 passed, 0 failed
Subdomains found when the primary CT source was down	5 of 5 domains (fallback source)

Measured 2026-10-09 (source: this actor's own test suite and runs).

Quick start

Press Start with the prefilled form (example.com, apify.com, github.com). Or use your own list:

{
  "domains": ["example.com", "apify.com", "github.com"],
  "maxDomains": 3,
  "includeSubdomains": true,
  "maxSubdomains": 50,
  "checkSsl": true,
  "checkHeaders": true
}

URLs such as https://www.example.com/page are reduced to their host. Malformed entries (IPs, ports, credentials, reserved TLDs) are skipped, listed in the run log and not charged.

Input

Field	Default	What it does
domains	example.com, apify.com, github.com	Domains to look up (required)
maxDomains	100 (1-5000)	Cap on domains looked up and charged this run
includeSubdomains	true	Query certificate transparency for subdomain names
maxSubdomains	200 (1-5000)	Cap on names returned per domain (subdomainCount still shows the full count)
checkSsl	true	Read the TLS certificate on port 443
checkHeaders	true	Fetch the homepage and score six security headers

Output

One row per domain. Main fields:

Field	What it is
domain, registrableDomain, checkedAt	Normalized host, its registrable domain, timestamp
registered	true, false (confirmed non-existent) or null (unknown)
registrar, createdAt, expiresAt, updatedAt, ageDays	RDAP registration data
registrationDate, expirationDate, lastChangedDate, domainStatus, daysToExpiry	Same dates under WHOIS-style names, plus status as one text value and days until expiry
nameservers, status	RDAP nameservers and status flags
dns	A, AAAA, MX, NS, TXT, CNAME records and DNS status; nullMx: true when the domain publishes a null MX (RFC 7505, accepts no email)
hasSpf, hasDmarc, dmarcPolicy	SPF and DMARC presence, DMARC policy (none, quarantine, reject)
subdomainCount, subdomains, certificatesSeen, subdomainsSource	Names seen in public certificates
sslIssuer, sslValidTo, sslDaysLeft, ssl	Certificate issuer, expiry and full detail
securityHeadersScore, securityHeaders	Score 0-6 for HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
answered	How many sections returned an answer
errors	Present only when a section failed or was skipped, one message per section

Sample output (real run, truncated)

{
  "domain": "example.com",
  "registrableDomain": "example.com",
  "checkedAt": "2026-10-09T13:13:21.181Z",
  "registered": true,
  "dns": {
    "status": "NOERROR",
    "a": [
      "172.66.147.243",
      "104.20.23.154"
    ],
    "aaaa": [
      "2606:4700:10::6814:179a",
      "2606:4700:10::ac42:93f3"
    ],
    "mx": [],
    "ns": [
      "elliott.ns.cloudflare.com",
      "hera.ns.cloudflare.com"
    ],
    "txt": [
      "v=spf1 -all",
      "_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9"
    ],
    "cname": [],
    "spf": {
      "present": true,
      "record": "v=spf1 -all",
      "all": "fail",
      "includes": []
    },
    "dmarc": {
      "present": true,
      "record": "v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s",
      "policy": "reject",
      "subdomainPolicy": "reject",
      "pct": null,
      "rua": []
    },
    "nullMx": true
  },
  "hasSpf": true,
  "hasDmarc": true,
  "dmarcPolicy": "reject",
  "ssl": {
    "issuer": "SSL Corporation",
    "issuerCn": "Cloudflare TLS Issuing ECC CA 3",
    "subjectCn": "example.com",
    "validFrom": "2026-09-26T22:49:11.000Z",
    "validTo": "2026-12-25T22:56:35.000Z",
    "daysLeft": 77,
    "expired": false,
    "authorized": true,
    "authorizationError": null,
    "protocol": "TLSv1.3",
    "sanCount": 2,
    "sanSample": [
      "example.com",
      "*.example.com"
    ]
  },
  "sslIssuer": "SSL Corporation",
  "sslValidTo": "2026-12-25T22:56:35.000Z",
  "sslDaysLeft": 77,
  "securityHeaders": {
    "finalStatus": 200,
    "score": 0,
    "max": 6,
    "present": {
      "strict-transport-security": null,
      "content-security-policy": null,
      "x-frame-options": null,
      "x-content-type-options": null,
      "referrer-policy": null,
      "permissions-policy": null
    },
    "missing": [
      "strict-transport-security",
      "content-security-policy",
      "x-frame-options",
      "x-content-type-options",
      "referrer-policy"
    ],
    "server": "cloudflare",
    "poweredBy": null,
    "finalUrl": "https://example.com/"
  },
  "securityHeadersScore": 0,
  "rdap": {
    "registered": true,
    "registrar": "RESERVED-Internet Assigned Numbers Authority",
    "registrarIanaId": "376",
    "createdAt": "1995-08-14T04:00:00Z",
    "expiresAt": "2027-08-13T04:00:00Z",
    "updatedAt": "2026-08-14T08:01:43Z",
    "nameservers": [
      "elliott.ns.cloudflare.com",
      "hera.ns.cloudflare.com"
    ],
    "status": [
      "client delete prohibited",
      "client transfer prohibited",
      "client update prohibited"
    ],
    "ageDays": 11379,
    "daysToExpiry": 307,
    "handle": "2336799_DOMAIN_COM-VRSN"
  },
  "registrar": "RESERVED-Internet Assigned Numbers Authority",
  "createdAt": "1995-08-14T04:00:00Z",
  "expiresAt": "2027-08-13T04:00:00Z",
  "updatedAt": "2026-08-14T08:01:43Z",
  "ageDays": 11379,
  "nameservers": [
    "elliott.ns.cloudflare.com",
    "hera.ns.cloudflare.com"
  ],
  "status": [
    "client delete prohibited",
    "client transfer prohibited",
    "client update prohibited"
  ],
  "subdomainCount": 6,
  "subdomains": [
    "dev.example.com",
    "example.com",
    "m.example.com",
    "products.example.com",
    "support.example.com"
  ],
  "certificatesSeen": 81,
  "subdomainsSource": "crt.sh",
  "answered": 5
}

Pricing

Pay per event, no subscription:

Event	Price
Actor start	$0.00005 per run
Domain looked up	$0.002 per domain ($2 per 1,000)

A domain is charged once, only when at least one section returned an answer (a confirmed non-existent domain counts). Malformed input is free.

Apify's free plan includes $5 of monthly platform credit, which covers about 2,000 domain lookups with this actor (at $0.002 per result, plus small platform usage).

Use cases

• Email deliverability: check SPF, DMARC and MX for many domains at once.
• Security and IT: SSL expiry and HTTP security headers across your domains.
• Domain investors: registrar, creation and expiry dates and domain age from RDAP.
• Attack-surface review: subdomains seen in certificate transparency logs.
• Sales qualification: domain age and email setup as a quick signal.

Use from AI agents (MCP, ChatGPT, Claude, Perplexity)

Domain Intelligence Lookup works as a tool for AI assistants through the official Apify MCP server. Add this server URL to any MCP client (Claude Desktop, Claude Code, Cursor, ChatGPT connectors, VS Code):

https://mcp.apify.com/?actors=transparent_meteorite/domain-intelligence-lookup

Claude Desktop / Cursor config:

{
  "mcpServers": {
    "apify": {
      "url": "https://mcp.apify.com/?actors=transparent_meteorite/domain-intelligence-lookup",
      "headers": { "Authorization": "Bearer <YOUR_APIFY_TOKEN>" }
    }
  }
}

Then ask in plain language, for example: "How do I check SPF and DMARC for many domains at once?"

Call it directly over HTTP (runs the actor and returns the dataset items in one request):

curl -X POST "https://api.apify.com/v2/acts/transparent_meteorite~domain-intelligence-lookup/run-sync-get-dataset-items?token=$APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domains": ["example.com", "apify.com", "github.com"], "maxDomains": 3, "includeSubdomains": true, "maxSubdomains": 50, "checkSsl": true, "checkHeaders": true}'

Python:

from apify_client import ApifyClient
client = ApifyClient("<YOUR_APIFY_TOKEN>")
run = client.actor("transparent_meteorite/domain-intelligence-lookup").call(run_input={"domains": ["example.com", "apify.com", "github.com"], "maxDomains": 3, "includeSubdomains": true, "maxSubdomains": 50, "checkSsl": true, "checkHeaders": true})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

The same actor works in n8n, Make, Zapier, LangChain, LlamaIndex and CrewAI through their Apify integrations.

Questions people ask

How do I check SPF and DMARC for many domains at once? Give the domains to this actor; each row includes the parsed SPF and DMARC records.

Is there a cheap bulk WHOIS API? This actor returns RDAP registration data (the successor to WHOIS) at $0.002 per domain.

Can it find subdomains? Yes, from certificate transparency logs, up to maxSubdomains per domain.

Use it from code

Small real input: it returns only a couple of rows, so a test run costs very little (see Pricing). Set the APIFY_TOKEN environment variable to your token from Apify Console > Settings > API & Integrations.

Python (pip install apify-client)

import os
from apify_client import ApifyClient

client = ApifyClient(os.environ["APIFY_TOKEN"])
run_input = {'domains': ['example.com'], 'maxDomains': 1, 'includeSubdomains': False}
run = client.actor("transparent_meteorite/domain-intelligence-lookup").call(run_input=run_input)
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

JavaScript / Node.js (npm install apify-client)

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: process.env.APIFY_TOKEN });
const input = {
  "domains": [
    "example.com"
  ],
  "maxDomains": 1,
  "includeSubdomains": false
};
const run = await client.actor('transparent_meteorite/domain-intelligence-lookup').call(input);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
console.log(items);

curl (runs the actor and returns the dataset items in one call)

curl -X POST "https://api.apify.com/v2/acts/transparent_meteorite~domain-intelligence-lookup/run-sync-get-dataset-items" \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domains": ["example.com"], "maxDomains": 1, "includeSubdomains": false}'

Send results to Google Sheets, Zapier, Make or n8n

• Google Sheets: every run's dataset has a CSV export link: https://api.apify.com/v2/datasets/<DATASET_ID>/items?format=csv&clean=true (the dataset ID is on the run's Storage tab). In Sheets, =IMPORTDATA("<that link>") loads it. Anyone with the link can read that dataset, so share it carefully. To export to Google Drive automatically, use the Google Drive integration on the actor's Integrations tab.
• Zapier: in the Apify app, use the trigger Finished Actor run (or Run Actor as an action) with transparent_meteorite/domain-intelligence-lookup, then Fetch dataset items and pass the rows to Google Sheets, a CRM or Slack.
• Make: the Apify app has Watch Actor Runs, Run an Actor and Get Dataset Items modules; connect them to any Make app.
• n8n: install the Apify node (@apify/n8n-nodes-apify) and use Run an Actor and get dataset, or the On new Apify event trigger.
• Schedule and webhooks: create a Task with your input, add a Schedule in Apify Console, and add a webhook if you want a call when a run finishes.

See the Apify integrations docs for setup steps.

Limits and notes

• crt.sh is often slow; the actor falls back to Cert Spotter, and on failure the row still returns with subdomainsError. Subdomain lists reflect only names that appear in public certificates, not a full DNS enumeration.
• SSL and header checks are skipped for hosts that do not resolve or resolve only to private addresses (SSRF guard).
• RDAP data depends on the registry; some TLDs return less, and registrant contact details are not requested or returned.
• Public lookups are rate limited upstream; very large lists run slower because crt.sh requests are spaced out.
• Only public protocol data is read. Nothing is guessed, and no personal data is collected beyond what a registry publishes in the fields above.

Reliability

Last 30 days, measured from Apify run records (all runs, including our own daily health checks): 20 of 20 finished runs succeeded (100.0%), median run time 2.9 s (90th percentile 29.6 s). Aborted runs (1) are not counted.

Updated 2026-10-11 automatically every week from the run history. Report any failure on the Issues tab with the run URL.

More resources

• Guide & examples: mamoo85.github.io/open-data-actors/domain-intelligence-lookup.html
• Sample output and example input on GitHub (masked sample CSV): github.com/Mamoo85/apify-actor-samples/domain-intelligence-lookup

Changelog

• 2026-10-06: Launched: RDAP, DNS over HTTPS with SPF/DMARC parsing, subdomains from certificate transparency (with a fallback source), SSL and security headers.
• 2026-10-07: Public on the Apify Store.
• 2026-10-07: Made public.
• 2026-10-09: Null MX domains now return nullMx: true and an empty MX list; Output tab table view; video walkthrough.
• 2026-10-09: Input sections, status messages, examples.
• 2026-10-09: Branding: maintained by Detroit Web Agent - Open Data.
• 2026-10-09: README free-credit note; clear log line and status when your Maximum cost per run is reached.
• 2026-10-11: Closing log line points to the Issues tab; Reliability section added to this README.
• 2026-10-13 v0.2: WHOIS-style field names (registrationDate, expirationDate, lastChangedDate, domainStatus, daysToExpiry); empty input now looks up example.com instead of failing. Price unchanged.
• 2026-10-13: Added a Run in 30 seconds section with a one-click prefilled run link, saved use-case presets, cross-links to pairing actors and Store title and search description reworded around how buyers search.

More questions

How do I check SPF and DMARC for a list of domains? Put them in domains. Each row includes DNS records with SPF and DMARC parsed.

Is this a bulk WHOIS lookup? It uses RDAP, the modern replacement for WHOIS, for registrar and date fields. Some country-code registries return little data.

Can it find subdomains? Yes, those seen in certificate transparency logs (includeSubdomains, capped by maxSubdomains).

Does it check SSL expiry? Yes, with checkSsl on.

What does nullMx mean? The domain publishes a "null MX" record (RFC 7505), meaning it accepts no email.

How this compares

Each of these checks is available free one domain at a time from public tools. This actor runs them together for a list and returns one row per domain. Commercial domain-intelligence platforms keep historical WHOIS and DNS data; this actor reports the current public answers only.

Works well with

Other actors from Detroit Web Agent - Open Data that pair with this one:

• Website Tech Stack Detector: what the site is built with, next to its DNS and SSL facts.
• Technical SEO Page Audit: on-page SEO and broken links for the same domains.
• Company Enrichment by Domain: company-level details for the same list.
• Building Permits Leads: look up the domains of the contractors and owners on new permits.
• FMCSA New Motor Carrier Leads: check registration age, DNS and SSL for the websites of new carriers.
• Sanctions Screening: pair a domain registration check with a name screening on the same counterparty.
• Sitemap Link Inventory: inventory the URLs of a domain after you have checked its registration and DNS.

What the free plan gets you

Free plan: about 2,500 domain lookups from your $5 monthly Apify credit (at $0.002 each, today's price); default settings return about 1 row (one sample domain; add more to scale). Need more? Upgrade your Apify plan or set a higher result limit in the input.

New to Apify? Create a free account and run this Actor in under a minute. Some links are affiliate links.

Related actors

More tools from the same publisher that fit this workflow:

• Company Enrichment by Domain: enrich a domain with socials, emails and tech stack
• Website Email Extractor: pull emails, phones and socials from each business website
• Website Tech Stack Detector: detect the CMS, frameworks and hosting behind any site
• Local Business Leads: find local businesses with no website from OpenStreetMap, a cheap complement to Maps data
• Shopify Leads & Store Scraper: Shopify store leads with apps, products and contacts
• New Business Filings: newly registered LLCs and corporations

Use from AI agents: every actor here is callable through the Apify MCP server (mcp.apify.com) and our open-data-actors MCP endpoint.

Need more than the data?

This actor is built by Detroit Web Agent, a small Detroit studio that builds websites, lead pages and simple data tools for small businesses. If you want these results turned into a working website, a landing page or a CRM import, or you need a field this actor does not cover yet, open an issue on the Issues tab or visit detroitwebagent.com.

---

Built and maintained by Detroit Web Agent - Open Data (Detroit, Michigan). Questions, bugs or a field you need: open an issue on this Actor's Issues tab and we will reply there.