Global B2B Email & Domain Deliverability, MX, SPF & DMARC Security Auditor

High-speed, zero-configuration B2B Email Deliverability & Corporate Domain Security Auditor powered by redundant DNS-over-HTTPS (Cloudflare DoH & Google Public DNS fallback).

Designed for B2B Sales Operations, Cold Email Deliverability Engineers, CRM Data Hygiene Pipelines, MSP / SecOps Teams, and AI / MCP Agents (mcpServer: true).

---

Key Capabilities

1. RFC 5322 Syntax & URL-to-Domain Normalization
   • Accepts raw email addresses (sales@stripe.com), bare domains (openai.com), or full website URLs (https://www.stripe.com/pricing) and automatically extracts the canonical domain.
2. Disposable & Role-Based Email Filtering
   • Instantly flags burner/temporary domains (mailinator.com, 10minutemail.com, guerrillamail.com, tempmail.com, yopmail.com, sharklasers.com, trashmail.com, etc.) and generic role accounts (admin@, support@, info@, sales@, contact@, billing@).
3. B2B Email Provider & Gateway Fingerprinting (MX Intelligence)
   • Identifies corporate email infrastructure directly from Mail Exchange (MX) records:
     • Google Workspace (google.com, googlemail.com)
     • Microsoft 365 (outlook.com)
     • Proofpoint (pphosted.com)
     • Mimecast (mimecast.com)
     • Zoho Mail (zoho.com, zoho.eu)
     • Amazon SES (amazonses.com, awsapps.com)
     • ProtonMail (protonmail.ch, proton.me)
4. Anti-Spoofing Security Audit (SPF & DMARC)
   • Queries TXT records at the root domain (v=spf1) and _dmarc.<domain> (v=DMARC1) to verify whether the organization enforces reject, quarantine, or none DMARC policies.
5. Composite Deliverability Score (0–100) & Deterministic Verdict
   • Classifies every target into an actionable verdict:
     • DELIVERABLE_HIGH_TRUST
     • DELIVERABLE_MISSING_SECURITY
     • RISKY_DISPOSABLE
     • UNDELIVERABLE_NO_MX
     • INVALID_SYNTAX

---

Input Parameters

Field	Type	Default	Description
targets	array (stringList)	["contact@openai.com", "sales@stripe.com", "fake@mailinator.com"]	List of email addresses, domains, or URLs to audit.
checkDmarcAndSpf	boolean (checkbox)	true	Query TXT records for SPF and _dmarc security policies.

---

Output Dataset Example

{
  "inputTarget": "contact@openai.com",
  "domain": "openai.com",
  "isValidSyntax": true,
  "isDisposable": false,
  "isRoleAccount": true,
  "hasMxRecords": true,
  "emailProvider": "Google Workspace",
  "mxRecords": [
    "1 aspmx.l.google.com",
    "5 alt1.aspmx.l.google.com"
  ],
  "hasSpf": true,
  "spfRecord": "v=spf1 include:_spf.google.com ~all",
  "hasDmarc": true,
  "dmarcPolicy": "reject",
  "dmarcRecord": "v=DMARC1; p=reject; rua=mailto:dmarc@openai.com",
  "deliverabilityScore": 95,
  "statusVerdict": "DELIVERABLE_HIGH_TRUST",
  "auditedAt": "2026-10-22T16:00:00+00:00"
}