Bulk domain lookup: tech stack, email provider, DNS and SSL.
Paste a list of domains, get one flat row per domain: who runs their email and how well it's protected, where DNS and hosting live, which CMS and tools the site uses, when the certificate and the registration expire.
hubspot.com
- Email provider
- Google Workspace
- DNS host · CDN
- Cloudflare · Cloudflare
- CMS
- HubSpot CMS
- Analytics
- Google Tag Manager, Cloudflare Web Analytics
- SSL
- Google Trust Services · 61 days left
- Registrar
- MarkMonitor Inc. · expires 2027-02-06
View the JSON record
{
"domain": "hubspot.com",
"registered": true,
"nameservers": ["jerry.ns.cloudflare.com", "yolanda.ns.cloudflare.com"],
"dnsProvider": "Cloudflare",
"mxRecords": ["smtp.google.com"],
"emailProvider": "Google Workspace",
"hasSpf": true,
"hasDmarc": true,
"dmarcPolicy": "reject",
"dmarcPct": 100,
"hasBimi": true,
"httpStatus": 200,
"finalUrl": "https://www.hubspot.com/",
"https": true,
"hsts": true,
"cdn": "Cloudflare",
"cms": "HubSpot CMS",
"analytics": ["Google Tag Manager", "Cloudflare Web Analytics"],
"marketing": ["HubSpot"],
"sslIssuer": "Google Trust Services",
"sslValidTo": "2026-12-10T23:26:16.000Z",
"sslDaysToExpiry": 61,
"tlsVersion": "TLSv1.3",
"registrar": "MarkMonitor Inc.",
"registeredAt": "2005-02-06T20:02:28Z",
"expiresAt": "2027-02-06T20:02:28Z",
"dnssec": true,
"checkedAt": "2026-10-10T08:54:28.146Z"
}Who it's for
- Sales and lead qualification
- Segment a prospect list by email provider, CMS, e-commerce platform or analytics stack. A Shopify store on Google Workspace is a different pitch from a WordPress site on Microsoft 365.
- Agencies and freelancers
- Find sites with SSL expiring this month, no DMARC policy or no HSTS. Each one is a concrete, checkable reason to get in touch.
- Security and IT teams
- Audit your own and your suppliers' domains: SPF and DMARC posture, MTA-STS, CAA, DNSSEC, certificate and registration expiry, in one export.
How it works
- Public sources
- Public DNS, the official registries over RDAP, the TLS certificate on port 443, and one polite homepage fetch per domain that respects robots.txt.
- No personal data
- No registrant names, emails or phone numbers. The local part of DMARC report addresses is redacted.
- Pay per result
- One charge per domain row, however much was found. Invalid lines and duplicates you pasted are skipped for free.
- Bulk and fast
- Up to 5,000 domains per run. Bare domains, URLs and email addresses all work; each is reduced to its registrable domain.
Pricing
Billed by Apify per result. Higher Apify plans pay less per result automatically.
| Apify plan | Per 1,000 domains |
|---|---|
| Starter | $4.00 |
| Scale | $3.00 |
| Business | $2.20 |
On the free Apify plan you can try it at the Starter price, up to 100 domains per run. Turn off the website check for a faster DNS-only run.
API and integrations
Call it from any language over HTTP, or wire it up without code.
- Schedules and saved tasks in the Apify console
- Slack, email, Google Sheets, Zapier, Make, n8n and webhooks
- The Apify MCP server, for AI agents
- Python and JavaScript clients
curl -X POST \
"https://api.apify.com/v2/acts/locaihost~domain-intel/run-sync-get-dataset-items?token=$APIFY_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"domains": ["hubspot.com", "https://www.shopify.com/pricing", "info@acme.com"],
"checkWebsite": true,
"checkSsl": true,
"checkRegistration": true
}'Questions
What can I paste in?
Bare domains (stripe.com), full URLs or email addresses, up to 5,000 per run. Each is reduced to its registrable domain and duplicates are merged.
How is the email provider detected?
From the domain's MX records, matched against known providers (Google Workspace, Microsoft 365, Zoho and others) and email security gateways such as Proofpoint or Mimecast. SPF, DMARC, BIMI and MTA-STS records are read and parsed too.
How is the tech stack detected?
From one fetch of the homepage: response headers, scripts and markup are matched against known signatures for CMSs, e-commerce platforms, analytics, frameworks, chat widgets, payments and marketing tools. robots.txt is respected.
Is WHOIS contact data included?
No. Registration data comes from the official registries over RDAP and covers only the registrar, dates, status and DNSSEC. Some country domains have no public RDAP service; those rows say so in the errors field.
What do I pay for a domain that doesn't exist?
A valid domain that turns out to be unregistered still returns a row saying so, and counts as one result. Invalid lines and duplicates are skipped and not charged.
Enrich a whole prospect list in one run.
Paste up to 5,000 domains and get one row each, ready for a spreadsheet or your CRM.