datagrit › Data › Domain WHOIS RDAP Lookup - DNS, MX & Expiry

Domain WHOIS RDAP Lookup - DNS, MX & Expiry

Bulk domain lookup: official RDAP (WHOIS) registration, expiry and availability plus DNS, mail provider, SPF/DMARC and hosting ASN, with expiry and registrar filters.

Domain WHOIS RDAP Lookup takes a list of domains and returns one flat row per domain: official registration data from the registry's RDAP server (the structured successor of WHOIS) plus the domain's DNS, mail provider, SPF and DMARC policy, and hosting network. It is built for bulk work: SEO and domain investors checking age and expiry, sales teams enriching lead lists with mail stack data, and security teams auditing email authentication.

Who is it for?

• Domain investors and expiry hunters - find domains that expire within N days, are in redemption or pending deletion, or are not registered at all.
• SEO and link building - domain age, registrar and hosting network for every prospect site in one CSV.
• B2B sales and lead enrichment - which companies run Google Workspace or Microsoft 365, and which sit behind Mimecast or Proofpoint.
• Email security and deliverability audits - SPF all-mechanism, DMARC policy (none, quarantine, reject) and DKIM keys on common selectors for a whole portfolio.
• Brand protection and due diligence - registrar, IANA id, abuse contact, transfer lock and DNSSEC for lookalike or acquired domains.

What data do you get?

Registration (RDAP)

Registrar name, IANA registrar id and abuse e-mail, creation, last change and expiry dates, domain age and days to expiry, EPP status codes with transferLocked and deletionPending flags, registry nameservers and DNSSEC. Registrant organization and country only when the registry or registrar publishes them; redacted values become null with registrantRedacted: true. When the registrant card is a privacy or proxy service (Domains By Proxy, Withheld for Privacy and similar), the country is null too, because the address on the card is the service's. Personal names, addresses, e-mails and phone numbers are never returned.

Availability

registered: false means the registry's RDAP server answered "not found" and the name is not delegated in DNS. When RDAP says not found but DNS still delegates the name, the row is found: false with reason notFoundButDelegated instead of a false "available"; when the delegation check itself fails, the row is found: false with reason dnsUnavailable. Both are free.

DNS, mail and hosting

A, AAAA, MX, NS and TXT records, mail provider (Google Workspace, Microsoft 365, Zoho, Proton, Fastmail, Amazon SES and 25 more), security gateway (Mimecast, Proofpoint, Broadcom, Barracuda, Cisco and others, with the mailbox provider behind it taken from the SPF include), DNS provider, SPF record and its all-mechanism, DMARC record and policy, DKIM keys on 9 common selectors, and the hosting ASN, network name and country of the first IPv4 address.

How it works

The RDAP server for each TLD comes from the IANA RDAP bootstrap file. Seven registries run official RDAP servers that are not in that file yet (.io, .sh, .ac, .me, .us, .ch, .li); they are used directly. If the IANA file cannot be read, lookups go through rdap.org. TLDs with no RDAP server in the IANA file or in that verified list (for example .de, .co, .it, .eu, .jp) are returned as found: false with reason noRdapService, free, and listed in the run status.

Requests are paced per server. Measured on 2026-10-01: Verisign (.com) answered 30 requests at up to 15 per second without a limit response; the Actor sends at most 10 per second and 4 in parallel to one registry. GoDaddy's registrar RDAP allows 6 requests per minute and answers 429 with Retry-After; the Actor waits as asked (up to 3 minutes). When a server reports x-ratelimit-remaining: 0, the Actor pauses that server until x-ratelimit-reset, or for 60 seconds when no reset time is sent.

Output fields

Every result is one flat record, so it drops straight into a spreadsheet, a database or a CRM.

Sample record

{
  "input": "https://www.wikipedia.org/wiki/Domain",
  "domain": "wikipedia.org",
  "tld": "org",
  "found": true,
  "registered": true,
  "reason": null,
  "registrar": "MarkMonitor Inc.",
  "registrarIanaId": 292,
  "registrarAbuseEmail": "abusecomplaints@markmonitor.com",
  "createdAt": "2001-01-13T00:12:14.754Z",
  "updatedAt": "2026-08-12T08:47:19.410Z",
  "expiresAt": "2027-01-13T00:12:14.000Z",
  "domainAgeDays": 9391,
  "daysToExpiry": 104,
  "status": [
    "clientDeleteProhibited",
    "clientTransferProhibited",
    "clientUpdateProhibited"
  ],
  "transferLocked": true,
  "deletionPending": false,
  "nameservers": [
    "ns0.wikimedia.org",
    "ns1.wikimedia.org",
    "ns2.wikimedia.org"
  ],
  "dnssec": false,
  "registrantOrganization": "Wikimedia Foundation, Inc.",
  "registrantCountry": "US",
  "registrantRedacted": false,
  "registrarRdap": "ok",
  "dnsStatus": "ok",
  "aRecords": [
    "103.102.166.224"
  ],
  "aaaaRecords": [
    "2001:df2:e500:ed1a::1"
  ],
  "mxRecords": [
    "mx-in1001.wikimedia.org",
    "mx-in2001.wikimedia.org"
  ],
  "mailProvider": "Google Workspace",
  "mailGateway": "Proofpoint",
  "dnsNameservers": [
    "ns0.wikimedia.org",
    "ns1.wikimedia.org",
    "ns2.wikimedia.org"
  ],
  "dnsProvider": "Cloudflare",
  "spfRecord": "v=spf1 include:_spf.google.com ~all",
  "spfPolicy": "~all",
  "dmarcRecord": "v=DMARC1; p=reject; rua=mailto:dmarc-rua@wikimedia.org;",
  "dmarcPolicy": "reject",
  "dkimSelectors": [
    "google"
  ],
  "hostingIp": "103.102.166.224",
  "hostingAsn": 14907,
  "hostingAsnName": "WIKIMEDIA - Wikimedia Foundation Inc., US",
  "hostingCountry": "US",
  "rdapServer": "https://rdap.publicinterestregistry.org/rdap/",
  "rdapSource": "iana-bootstrap",
  "sourceUrl": "https://rdap.publicinterestregistry.org/rdap/domain/wikipedia.org",
  "scrapedAt": "2026-10-01T08:00:00.000Z"
}

Input

Call it from your code

Run the Actor and get the results in one request. Replace YOUR_APIFY_TOKEN with the token from your Apify account settings.

curl -X POST "https://api.apify.com/v2/acts/datagrit~domain-whois-rdap-lookup/run-sync-get-dataset-items?token=YOUR_APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domains":["stripe.com","shopify.com","atlassian.com","nature.com","wikipedia.org","mozilla.org","bbc.co.uk","lemonde.fr","web.dev","google.io","google.us","zzqx-nonexist-8841.com"]}'

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: process.env.APIFY_TOKEN });
const run = await client.actor('datagrit/domain-whois-rdap-lookup').call({
  "domains": [
    "stripe.com",
    "shopify.com",
    "atlassian.com",
    "nature.com",
    "wikipedia.org",
    "mozilla.org",
    "bbc.co.uk",
    "lemonde.fr",
    "web.dev",
    "google.io",
    "google.us",
    "zzqx-nonexist-8841.com"
  ]
});
const { items } = await client.dataset(run.defaultDatasetId).listItems();
console.log(items.length, items[0]);

from apify_client import ApifyClient
import os

client = ApifyClient(os.environ["APIFY_TOKEN"])
run = client.actor("datagrit/domain-whois-rdap-lookup").call(run_input={
  "domains": [
    "stripe.com",
    "shopify.com",
    "atlassian.com",
    "nature.com",
    "wikipedia.org",
    "mozilla.org",
    "bbc.co.uk",
    "lemonde.fr",
    "web.dev",
    "google.io",
    "google.us",
    "zzqx-nonexist-8841.com"
  ]
})
items = client.dataset(run["defaultDatasetId"]).list_items().items
print(len(items), items[0] if items else None)

Related Actors