Name: WHOIS and Domain Availability API: RDAP, DNS, SPF
Brand: rasareka
SKU: api-rasareka-domain-info
Availability: InStock
Author: API Market

Khairul Fauzy Khairudin

# Domain Info API

## Overview

The Domain Info API returns everything about a domain in one call. WHOIS data comes from the official RDAP registries (registrar, creation, update and expiry dates, age, status codes and nameservers), live DNS records cover A, AAAA, CNAME, MX, NS, TXT, SOA and CAA, the email security check reports MX hosts, the mail provider and SPF and DMARC records, and an availability check tells you whether a domain can be registered. Each part also has its own endpoint, and availability works in bulk for up to 20 domains.

It is built for developers of domain search tools, security and fraud checks, sales and marketing enrichment, and IT audit tools. In our tests `github.com` returned its MarkMonitor registration, 6,973 day age and DNS in 1.2 seconds, `stripe.com` returned Google Workspace as its mail provider with a DMARC `reject` policy, and an availability check confirmed an unused `.com` name was free.

## Features

*   **6 endpoints**: full report, WHOIS, DNS, email security, availability and bulk availability.
*   **Official RDAP data**: registrar, dates, domain age, status and nameservers from the registries.
*   **Live DNS**: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records with TTLs.
*   **Email security**: MX hosts, mail provider, SPF and DMARC.
*   **Availability**: single checks and up to 20 domains per call, with a confidence level.
*   **Rate limit**: 10 requests per second on every plan.

## Use Cases

*   **Domain search**: check name ideas for availability before purchase.
*   **Fraud checks**: flag very new domains at sign up or payment.
*   **Security audits**: review SPF and DMARC across a list of domains.
*   **Sales enrichment**: find the mail provider and registrar of a prospect.
*   **Brand protection**: watch expiry dates of your own domains.

## API Documentation

### Base URL

All requests use the following base URL.

```
https://prod.api.market/api/v1/rasareka/domain-info
```

### Authentication

All requests are authenticated with the `x-api-market-key` header.

```
x-api-market-key: YOUR_API_KEY
```

Replace `YOUR_API_KEY` with your actual API key.

### Endpoints

#### 1. Full domain report

Returns WHOIS, DNS, email security and HTTPS results for one domain in a single response.

**Method:** `GET`

**Endpoint:** `/domain/v1/domain`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `domain` | query | Domain name, for example `github.com` | string | Yes | - | - |

**Example Request:**

```bash
curl -X GET 'https://prod.api.market/api/v1/rasareka/domain-info/domain/v1/domain?domain=github.com' \
  -H 'x-api-market-key: YOUR_API_KEY'
```

**Example Response (200 OK):**

```json
{
  "domain": "github.com",
  "dns_exists": true,
  "whois": {
    "supported": true,
    "registered": true,
    "domain": "github.com",
    "registrar": "MarkMonitor Inc.",
    "registrar_iana_id": "292",
    "created": "2007-10-09T18:20:50Z",
    "updated": "2026-09-07T09:22:52Z",
    "expires": "2028-10-09T18:20:50Z",
    "age_days": 6973,
    "days_until_expiry": 697,
    "status": [
      "client delete prohibited",
      "client transfer prohibited",
      "client update prohibited"
    ],
    "nameservers": [
      "dns1.p08.nsone.net",
      "dns2.p08.nsone.net"
    ],
    "dnssec": false,
    "registrant_org": null
  },
  "dns": {
    "AAAA": [],
    "NS": [
      {
        "value": "dns1.p08.nsone.net",
        "ttl": 3088
      },
      {
        "value": "dns2.p08.nsone.net",
        "ttl": 3088
      }
    ],
    "A": [
      {
        "value": "140.82.112.3",
        "ttl": 2
      }
    ],
    "TXT": [
      {
        "value": "00Dd0000000hHE0=1TBKg000000TN2r",
        "ttl": 220
      },
      {
        "value": "MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805",
        "ttl": 220
      }
    ],
    "MX": [
      {
        "priority": 0,
        "host": "github-com.mail.protection.outlook.com",
        "ttl": 120
      }
    ],
    "CNAME": [],
    "SOA": [
      {
        "mname": "ns-1707.awsdns-21.co.uk",
        "rname": "awsdns-hostmaster.amazon.com",
        "serial": 1,
        "ttl": 900
      }
    ],
    "CAA": [
      {
        "value": "0 issue \"digicert.com\"",
        "ttl": 3600
      },
      {
        "value": "0 issue \"globalsign.com\"",
        "ttl": 3600
      }
    ]
  },
  "email_security": {
    "accepts_mail": true,
    "mail_provider": "Microsoft 365",
    "spf": {
      "present": true,
      "record": "v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com...",
      "all": "~all"
    },
    "dmarc": {
      "present": true,
      "record": "v=DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:dmarc@github.com; ruf=mailto:dmarc@github.com; fo=1",
      "policy": "quarantine"
    },
    "score": 90
  },
  "https": {
    "reachable": true,
    "status_code": 200,
    "final_url": "https://github.com/",
    "response_time_ms": 35,
    "server": "cloudflare",
    "hsts": true,
    "powered_by": null,
    "cdn": "Cloudflare"
  }
}
```

The response above is shortened: lists are cut to two or three entries.

#### 2. WHOIS (RDAP)

Returns the registrar, creation, update and expiry dates, domain age, status codes and nameservers.

**Method:** `GET`

**Endpoint:** `/domain/v1/whois`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `domain` | query | Domain name, for example `github.com` | string | Yes | - | - |

**Example Request:**

```bash
curl -X GET 'https://prod.api.market/api/v1/rasareka/domain-info/domain/v1/whois?domain=bbc.co.uk' \
  -H 'x-api-market-key: YOUR_API_KEY'
```

**Example Response (200 OK):**

```json
{
  "domain": "bbc.co.uk",
  "supported": true,
  "registered": true,
  "registrar": "British Broadcasting Corporation",
  "registrar_iana_id": null,
  "created": "1994-12-13T03:49:48Z",
  "updated": "2025-10-29T03:51:11.009091Z",
  "expires": "2034-12-13T03:49:48Z",
  "age_days": 11656,
  "days_until_expiry": 2953,
  "status": [
    "server delete prohibited",
    "server transfer prohibited",
    "server update prohibited"
  ],
  "nameservers": [
    "ddns0.bbc.co.uk.",
    "ddns0.bbc.com.",
    "ddns1.bbc.co.uk.",
    "ddns1.bbc.com.",
    "dns0.bbc.co.uk.",
    "dns0.bbc.com.",
    "dns1.bbc.co.uk.",
    "dns1.bbc.com."
  ],
  "dnssec": false,
  "registrant_org": null
}
```

#### 3. DNS records

Returns live DNS records. Limit the record types with `types`.

**Method:** `GET`

**Endpoint:** `/domain/v1/dns`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `domain` | query | Domain name, for example `github.com` | string | Yes | - | - |
| `types` | query | Comma separated record types: `A`, `AAAA`, `CNAME`, `MX`, `NS`, `TXT`, `SOA`, `CAA` | string | No | all types | - |

**Example Request:**

```bash
curl -X GET 'https://prod.api.market/api/v1/rasareka/domain-info/domain/v1/dns?domain=github.com&types=A,MX,TXT' \
  -H 'x-api-market-key: YOUR_API_KEY'
```

**Example Response (200 OK):**

```json
{
  "domain": "github.com",
  "exists": true,
  "records": {
    "A": [
      {
        "value": "140.82.113.4",
        "ttl": 29
      }
    ],
    "TXT": [
      {
        "value": "00Dd0000000hHE0=1TBKg000000TN2r",
        "ttl": 169
      },
      {
        "value": "MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805",
        "ttl": 169
      }
    ],
    "MX": [
      {
        "priority": 0,
        "host": "github-com.mail.protection.outlook.com",
        "ttl": 85
      }
    ]
  }
}
```

The record lists above are shortened to two entries each.

#### 4. Email security

Returns MX hosts, the mail provider and the SPF and DMARC records.

**Method:** `GET`

**Endpoint:** `/domain/v1/email-security`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `domain` | query | Domain name, for example `github.com` | string | Yes | - | - |

**Example Request:**

```bash
curl -X GET 'https://prod.api.market/api/v1/rasareka/domain-info/domain/v1/email-security?domain=stripe.com' \
  -H 'x-api-market-key: YOUR_API_KEY'
```

**Example Response (200 OK):**

```json
{
  "domain": "stripe.com",
  "mx": [
    {
      "priority": 10,
      "host": "aspmx.l.google.com",
      "ttl": 86400
    },
    {
      "priority": 20,
      "host": "alt1.aspmx.l.google.com",
      "ttl": 86400
    }
  ],
  "accepts_mail": true,
  "mail_provider": "Google Workspace",
  "spf": {
    "present": true,
    "record": "v=spf1 ip4:198.2.180.60/32 ip4:13.111.2.227/32 include:spf1.stripe.com include:greenhouse-outbound-mail.stripe.com include:_spf.qualtrics.com ~all",
    "all": "~all"
  },
  "dmarc": {
    "present": true,
    "record": "v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;",
    "policy": "reject"
  },
  "score": 100
}
```

The response above is shortened.

#### 5. Domain availability

Tells you whether a domain can be registered. A registered domain also returns its registrar and expiry date.

**Method:** `GET`

**Endpoint:** `/domain/v1/availability`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `domain` | query | Domain name, for example `github.com` | string | Yes | - | - |

**Example Request:**

```bash
curl -X GET 'https://prod.api.market/api/v1/rasareka/domain-info/domain/v1/availability?domain=my-new-startup-idea-zz9q.com' \
  -H 'x-api-market-key: YOUR_API_KEY'
```

**Example Response (200 OK):**

```json
{
  "domain": "my-new-startup-idea-zz9q.com",
  "available": true,
  "confidence": "high",
  "note": "Registry has no record for this domain"
}
```

A registered domain returns `available: false`:

```json
{
  "domain": "google.com",
  "available": false,
  "confidence": "high",
  "expires": "2028-09-14T04:00:00Z",
  "registrar": "MarkMonitor Inc."
}
```

#### 6. Bulk availability

Checks up to 20 domains in one call.

**Method:** `POST`

**Endpoint:** `/domain/v1/availability-bulk`

**Parameters:**

| Name | In | Description | Type | Required | Default | Max Value |
|---|---|---|---|---|---|---|
| `domains` | body | List of domain names | array of strings | Yes | - | 20 domains |

**Example Request:**

```bash
curl -X POST 'https://prod.api.market/api/v1/rasareka/domain-info/domain/v1/availability-bulk' \
  -H 'x-api-market-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"domains": ["brandname-zz9q.com", "api.market", "example.io"]}'
```

**Example Response (200 OK):**

```json
{
  "count": 3,
  "available": 1,
  "results": [
    {
      "domain": "brandname-zz9q.com",
      "available": true,
      "confidence": "high",
      "note": "Registry has no record for this domain"
    },
    {
      "domain": "api.market",
      "available": false,
      "confidence": "medium",
      "note": "No RDAP for this TLD; domain has DNS records"
    },
    {
      "domain": "example.io",
      "available": false,
      "confidence": "medium",
      "note": "No RDAP for this TLD; domain has DNS records"
    }
  ]
}
```

## Status Codes

| Code | Status | Description |
|---|---|---|
| 200 | OK | The request succeeded and the JSON result is in the response body. |
| 400 | Bad Request | `domain` is missing or is not a valid domain name, for example `{"error": "invalid_parameter", "message": "Invalid domain"}`. |
| 401 | Unauthorized | The `x-api-market-key` header is missing or the key is not valid. |
| 403 | Forbidden | Your key does not have an active subscription that includes this endpoint. |
| 404 | Not Found | The path does not match an endpoint of this API. Check the Base URL and path. |
| 429 | Too Many Requests | You went over 10 requests per second or used up the quota of your plan. |
| 500 | Internal Server Error | The request failed on the server. Retry once, then contact us if it continues. |
| 503 | Service Unavailable | The service is temporarily unavailable. Retry after a short wait. |

## Rate Limits

Every plan allows up to 10 requests per second, and each subscription plan has its own monthly quota. When you go over a limit, the API returns `429 Too Many Requests`. Throttle your requests, back off before retrying, and honour the `Retry-After` header when it is present.

## FAQ

*   **Where does the WHOIS data come from?**
    From the official RDAP service of each registry, the modern replacement for WHOIS.

*   **What does confidence medium mean on availability?**
    Some TLDs have no RDAP service. For those the API uses DNS records instead, which is reliable for registered domains but less certain for free ones.

*   **Is registrant contact data returned?**
    Only `registrant_org` when the registry publishes it. Most registries redact personal contact data.

*   **Can I check many domains at once?**
    Yes, `availability-bulk` takes up to 20 domains per call.

## Contact Us

If you have any questions or need support, reach out through the chat embedded on this page or email us at hello@magicapi.com.


WHOIS from official RDAP registries, DNS records, SPF and DMARC checks, HTTPS status and domain availability for one domain or 20 at a time.

WHOIS and Domain Availability API: RDAP, DNS, SPF