E-commerce Domain Email Trust Auditor (NEWAPI01)

Audit exact customer-supplied domains using public DNS. The Actor reports MX routing, SPF, DMARC, MTA-STS and SMTP TLS reporting records, with evidence for each lookup and a deterministic configuration-priority score. It makes no Shopify request, does not retrieve app reviews, does not discover merchant domains, and sends no email.

Who uses it

E-commerce agencies, deliverability consultants and multi-store operators can prioritize configuration reviews for domains they already know. An observed record is not proof of actual inbox delivery, fraud, compliance, commercial intent, merchant ownership or a security breach. The score is a checklist weight, not a probability.

Input

{"domains":["example.com","shop.example"],"maxResults":10,"timeoutSeconds":3,"requestDelayMs":100}

Alternatively provide csvText containing a domain header and domain rows. The two modes are mutually exclusive. The default test audits example.com. Domains are IDNA normalized and deduplicated; URLs, IP addresses and single-label hosts are rejected. maxResults is 1–1000, input length at most 2000. The Actor makes at most 6000 DNS attempts, with one retry for transient failures and at least 100 ms between attempts. Error conditions are not interpreted as absent records.

Output

One Dataset row for each successfully audited unique domain. JSON and CSV exports in Apify or Clay/n8n use domain, mxHosts, mxStatus, spfRecord, spfStatus, dmarcRecord, dmarcPolicy, dmarcStatus, mtaStsRecord, tlsRptRecord, findings, opportunityScore, observedAt, evidence, lookupStatus, and billable. Nested findings/evidence are JSON in CSV export. Run OUTPUT has counts and source metadata. A failed DNS audit produces no paid dataset row and increments failed; it does not produce a false finding.

A Null MX (0 .) is reported as mxStatus: null-mx and is not scored as a missing MX. The score weights are: no MX 20; no SPF 20; multiple SPF 25; SPF +all 20; no DMARC 30; DMARC p=none 10; malformed or duplicate DMARC 20. Capped at 100. Optional MTA-STS and TLS reporting are shown as observed records, not scored. DKIM is not guessed because selectors are not enumerable from ordinary DNS.

Source and billing

Queries follow the public DNS protocol for names explicitly supplied by the caller. This Actor uses the system-configured recursive DNS resolver. It does not require Shopify approval, an API key or scraping permissions from a marketplace. Users should only submit domains they have a legitimate reason to examine and respect their resolver/network policies.

Apify Store price: $0.0045 per successfully audited unique domain ($4.50 per 1000), using only the custom audited-domain PPE event. There is no separate paid dataset-item or startup event. The minimum run spending limit is $0.0045. A cloud test delivered five records and recorded five events, with $0.000202 observed platform usage cost for that owner run; future resource costs can vary. A local run does not bill.

Local checks

python -m pip install -r requirements.txt
python -m unittest discover -s tests -v
python main.py --local example-input.json
docker build -f .actor/Dockerfile -t newapi01-email-trust:qa .

This product is unrelated to Shopify, not affiliated with any DNS provider, and does not include a promise that a missing optional record causes deliverability failure.