Bulk WHOIS & DNS Lookup: RDAP, SSL Expiry, SPF & DMARC

Paste a list of domains (or URLs) and get one clean row per domain with:

• RDAP / WHOIS: registrar, IANA ID, abuse contact, creation / update / expiry dates, domain age, days until expiry, EPP status, nameservers, DNSSEC. The registry's RDAP server is found through the official IANA bootstrap, with rdap.org as a fallback.
• DNS: A, AAAA, CNAME, MX, NS, TXT, CAA, SOA, from public resolvers 1.1.1.1 and 8.8.8.8.
• SSL certificate on port 443: issuer, validity dates, days left, SANs, trust status, TLS version.
• Email authentication: SPF (syntax, all qualifier, includes, lookup count, issues), DMARC (policy, sp, pct, rua; inherited from the organizational domain if the subdomain has none), BIMI, MTA-STS (record plus policy mode) and TLS-RPT.
• Provider detection: the mail provider (Google Workspace, Microsoft 365, Proofpoint, …) and the DNS provider (Cloudflare, Route 53, NS1, …), inferred from MX and NS records.
• Health score from 0 to 100, with each deduction listed so you can see why.
• Optional: subdomains from Certificate Transparency logs (crt.sh).

Use cases: lead enrichment (company email stack, domain age), security and compliance audits (SPF/DMARC/certificate hygiene), expiry monitoring across a portfolio, and due diligence.

Use cases

• Expiry monitoring: catch domain registrations and SSL certificates that expire soon, on a schedule.
• Email authentication audits: SPF, DMARC, BIMI and MTA-STS for every client or vendor domain.
• Sales enrichment: domain age and mail provider (Google Workspace, Microsoft 365) as firmographic signals.
• Security and vendor due diligence: registrar, DNS host, certificate issuer and subdomains from certificate transparency.
• Portfolio management for agencies and domain investors.

Input example

{ "domains": ["apify.com", "https://www.github.com/about", "bbc.co.uk"], "includeCtSubdomains": false }

Each check can be switched off (includeRdap, includeDns, includeSsl, includeEmailAuth). Invalid entries and duplicates are skipped and never charged.

Use it from AI agents, the API or no-code tools

Add Apify's hosted MCP server with just this tool:

{
  "mcpServers": {
    "domain-intel": { "url": "https://mcp.apify.com?tools=steadyline/domain-intel" }
  }
}

Sign in with Apify (OAuth) on first connect, or send an Authorization: Bearer <APIFY_TOKEN> header. Then ask your agent, for example:

Use steadyline/domain-intel to check these 100 domains and list the ones whose SSL certificate or registration expires in the next 30 days, plus any with no DMARC policy.

See MCP setup for Claude, Cursor and VS Code or add all tools at once.

REST API

Run it and get results in one call:

curl -X POST "https://api.apify.com/v2/acts/steadyline~domain-intel/run-sync-get-dataset-items?token=$APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domains": ["apify.com", "github.com"]}'

No-code

Use the official Apify app in Zapier ("Run Actor"), Make ("Run an Actor") or n8n (Apify node), choose steadyline/domain-intel, then send the dataset items to Google Sheets, Slack, a CRM or a database.

Pricing

Pay per event on Apify, no subscription. Prices are read from the public Apify Store listing; the Store page is authoritative.

Notes and limits

• RDAP replaces WHOIS for gTLDs. Some ccTLDs (for example .de) don't offer public RDAP, so rdap may be missing while DNS/SSL/email checks still work.
• Registrant personal data is redacted by registries, and this Actor does not try to recover it. Only the registrant organization/country is kept, and only when the registry publishes it.
• The SPF lookup count covers the top level only (nested includes are not expanded).

Works well with

• Email list hygiene: clean addresses with Email Deliverability Checker, then audit the remaining company domains here.
• Domain due diligence: this Actor + Tech Stack Detector + Website Screenshot, about $0.005 per domain.
• Related: Email Deliverability Checker, Tech Stack Detector, Website Screenshot API.

FAQ

Acceptable use

The Actor only reads public DNS, RDAP, Certificate Transparency and TLS handshake data, at a polite concurrency. Use it for domains you own, manage or have a legitimate interest in researching. Don't use it for spam or abuse. You're responsible for complying with applicable laws and the terms of the registries you query.

Built and maintained by Steadyline Data. Found an issue? Open one on the Actor's Issues tab.