Home › Guides › Domains with a DMARC reject policy

Domains with a DMARC reject policy: registrar, SSL and headers score

A DMARC policy of reject is the strictest email setting. These four well-known domains publish it; the row also shows registrar, certificate days left and a security-headers score from the same lookup.

The data (4 real rows)

domainregistrardmarcPolicyhasSpfsslIssuersslDaysLeftsecurityHeadersScore
shopify.comMarkMonitor Inc.rejectTrueGoogle Trust Services872
stripe.comSafeNames Ltd.rejectTrueDigiCert, Inc.605
gitlab.comGandi SASrejectTrueSectigo Limited301
wordpress.orgMarkMonitor Inc.rejectTrueLet's Encrypt722

Rows come from the free sample file for this actor, not a full run. Long values are shortened and personal contact fields are left out. Source: apify-actor-samples/domain-intelligence-lookup.

How to get this yourself

  1. Open the WHOIS/RDAP, DNS, SSL and security headers in one call actor on Apify.
  2. Give domains; get registrar and age, nameservers, SPF/DMARC, SSL expiry and header score.
  3. Run it, then export the dataset as CSV, JSON or Excel from the results tab.

Limits, stated plainly

RDAP data varies by registry; some fields are redacted. This page shows a small sample, so counts here say nothing about the whole dataset.

Run it on Apify   About this actor

Disclosure: we build and maintain this actor.

Related

This actor

Data and schema

Guides with real sample rows from this actor

More in websites, seo and tech

Some links are affiliate links.