DNS Lookup: Bulk DNS Records, MX, SPF & DMARC Checker

This DNS lookup reads the DNS records of any list of domains in one run: A, AAAA, CNAME, MX, NS, TXT, CAA and SOA, plus each domain's SPF record and DMARC policy. It works as a bulk MX lookup, SPF checker and DMARC checker, with true or false flags for has-MX, has-SPF and has-DMARC on every row.

Cost: $0.002 per domain ($2 per 1,000). Domains that do not exist, DNS errors and invalid entries are free. No login or API key.

How to check MX, SPF and DMARC for a list of domains

1. Enter domains under Domains, one per line. Website and email addresses work too.
2. Pick Record types, or leave all of them. To get only MX records, pick MX and turn off SPF and DMARC.
3. Keep SPF and DMARC on for email checks.
4. Click Start, then open the DNS records or Email security table.

Each record type is asked from public DNS, and mail servers come back sorted by priority with TXT records joined. DMARC report addresses are never returned, only the policy tags and whether reports are requested. The form opens with three domains and costs under a cent. Typical uses are email deliverability checks, IT and security audits (name servers, CAA records, mail providers), lead enrichment by mail provider (Google Workspace or Microsoft 365 from MX records) and monitoring DNS changes.

How much does the DNS lookup cost?

Event	Price
Domain looked up (domain-lookup)	$0.002 ($2 per 1,000)
Domain that does not exist, DNS error or invalid entry	Free

Apify adds only its small standard fee per run start. You can set a spending limit on any run, and the Actor stops cleanly when it is reached.

Example: checking SPF and DMARC for 5,000 client domains costs 5,000 x $0.002 = $10.

Input

{
  "domains": [
    "apify.com",
    "wikipedia.org",
    "gov.uk"
  ]
}

Output

One row per result:

{
  "domain": "apify.com",
  "a": [
    "104.18.x.x"
  ],
  "mx": [
    {
      "priority": 1,
      "exchange": "aspmx.l.google.com"
    }
  ],
  "ns": [
    "ns1.example-dns.com"
  ],
  "spf": "v=spf1 include:_spf.google.com ~all",
  "dmarcPolicy": {
    "v": "DMARC1",
    "p": "reject",
    "reportsRequested": true
  },
  "hasMx": true,
  "hasSpf": true,
  "hasDmarc": true,
  "status": "ok",
  "charged": true
}

status is ok for domains that were looked up, which are charged. not_found, dns_error and invalid_domain rows are free, with the reason in error. If one record type times out, the row is still returned with that type in failedTypes.

Related Actors

• Domain Authority Checker: Use it to check domain authority for a bulk list of domains.
• Company Name to Domain: Use it to turn a list of company names into official website domains.
• Tech Stack Detector: Use it to see the CMS, analytics, frameworks, CDN and hosting behind a list of websites.
• AI Crawler Access Audit: Use it to check which AI crawlers a website allows or blocks in robots.txt.

FAQ

Which DNS servers does it use? The public resolvers of the Apify platform. Results match what any public resolver returns.

Can I get only MX records? Pick MX under Record types and turn off SPF and DMARC.

Why are DMARC report addresses missing? They can be personal mailboxes, so the Actor returns the policy and whether reports are requested, not the addresses.

Does it check if a domain is registered? A domain with no DNS records is returned as not_found. For registration data use a WHOIS or RDAP lookup.