Discover & Verify Professional Emails

This Actor provides two deliberately bounded business-contact workflows:

• discover reads an approved organization's HTTPS homepage and at most two same-site contact/about/support/help pages, returning only explicitly published role-based addresses such as support@, sales@, or privacy@ on that exact domain.
• verify performs syntax and public DNS MX assessment for business addresses supplied by the user.

It never generates person-derived addresses, searches guessed addresses, probes SMTP/mailboxes, sends mail, signs in, bypasses access controls, or claims that a mailbox exists. mailboxVerified is always false; an MX record proves only that the domain advertises mail routing.

Input

• mode — discover or verify.
• domain — required only for discover mode; an organization domain without scheme/path.
• emails — required only for verify mode; 1–20 authorized business addresses. Personal and disposable mailbox providers are rejected.
• maxItems — 1–20 output records; default 10.

Use the Actor only for an organization you own or are authorized to assess, and treat any output as business contact/domain evidence—not consent to outreach.

Output

Records include the address, domain/local part, role classification, source type, optional exact official page, domain MX state/hosts, explicit mailboxVerified: false, method, truthful status, and timestamp. Failures and access controls produce no fake dataset row; bounded diagnostics are written to diagnostics and the run fails.

Network and privacy controls

Discovery uses HTTPS only, allows only the requested domain and its www alias, resolves targets to public IP addresses before each request, follows at most two same-site redirects, limits pages to 2 MB and 15 seconds, and never visits email links or unrelated sites. Verification uses system DNS only. Keep and process contact data according to applicable privacy, anti-spam, employment, and data-protection law.

Development

Use Node.js 22 or newer. Run npm test, npm run check, and npm run validate. The default bounded fixture assesses the domain MX state for the user-supplied support@apify.com; it does not contact that mailbox.