Domain Email Security Auditor

Audit public DNS records for email-delivery and anti-spoofing posture: MX, SPF, DMARC, CAA, and nameservers. The Actor produces a deterministic score, spoofing-risk level, parsed evidence, and prioritized fixes without an API key, browser, proxy, SMTP probe, or uploaded data.

Use cases

• Find domains vulnerable to straightforward email spoofing.
• Audit client or company domain portfolios before outreach campaigns.
• Check staged SPF and DMARC rollouts on a schedule.
• Feed compact domain-security evidence to automation and AI agents.

Input

Provide 1–100 domains, website URLs, or email addresses. Only the domain portion is used.

{ "domains": ["example.com", "https://apify.com", "hello@github.com"] }

Output

One dataset row per resolving domain, including posture score, spoofing risk, MX hosts, SPF validity and approximate DNS-lookup terms, DMARC policy/percentage/reporting, CAA and nameserver counts, raw public policy records, and recommendations. Non-resolving domains and transient DNS failures are uncharged errors.

Pricing

Pay per event: a small Actor-start event plus $0.005 per resolving domain audited. Platform usage is included.

Important limits

This is a DNS configuration audit, not a deliverability guarantee or legal/compliance certification. Generic DKIM validation is impossible without knowing each sender's selector, so the Actor does not guess DKIM status. It does not connect to mail servers or send email. SPF lookup counting is a useful static approximation; nested includes require a full recursive evaluator.

Changelog

• 0.1.0: Initial production release.