Email Provider & DNS Checker – MX Lookup, SPF, DMARC, DKIM

Email Provider & DNS Checker finds out which email provider a company uses — Google Workspace, Microsoft 365, Zoho, IONOS, STRATO or one of 29 mail hosts and security gateways — and checks its email authentication setup (SPF, DMARC, DKIM, MTA-STS, BIMI) for a whole list of domains at once.

Paste a list of domains, click Start, and get one clean row per domain. It is a bulk MX lookup and email deliverability check you can run from the browser, the API, a schedule or an AI agent. You pay $7 per 1,000 checked domains and nothing for domains that do not exist.

It only reads public DNS records: no website scraping, no login, no proxy, no personal data.

What can Email Provider & DNS Checker do?

• 📮 Detect the email provider from the MX records: Google Workspace, Microsoft 365, Zoho Mail, Proton Mail, Fastmail, IONOS, STRATO, GMX / WEB.DE, Hetzner, OVHcloud, GoDaddy, Amazon SES and more
• 🛡️ See through security gateways: when MX points to Proofpoint, Mimecast, Barracuda, Cisco, Hornetsecurity, Trend Micro or Sophos, the real mailbox host is read from SPF
• ✅ Email authentication check: SPF record and includes, DMARC record and policy (none, quarantine, reject), common DKIM selectors, MTA-STS and BIMI
• ⚡ Fast and cheap: DNS only, no browser; 10 domains take about 3 seconds
• 💸 Fair pricing: domains that do not exist or do not resolve are free
• 🤖 Ready for automation: Apify API, scheduling, webhooks, integrations (Make, Zapier, n8n, Google Sheets) and the Apify MCP server for AI agents

What data does Email Provider & DNS Checker return?

Field	Example	Meaning
provider	Microsoft 365	Mail host detected from the MX records
mailboxProviderBehindGateway	Google Workspace	If the MX points to a security gateway (Proofpoint, Mimecast, ...), the real mailbox host taken from SPF
mxHosts	["sap-com.mail.protection.outlook.com"]	MX records, by priority
spf, spfIncludes	v=spf1 include:_spf.google.com ~all	SPF record and its includes
dmarc, dmarcPolicy	reject	DMARC record and policy (none, quarantine, reject)
dkimFound	["selector1","selector2"]	Common DKIM selectors that exist
mtaSts, bimi	true	MTA-STS and BIMI records present
checkedAt	2026-10-06T13:59:44Z	When the DNS was read
error	Domain does not exist	Set when the domain cannot be checked (free)

Download the results as JSON, CSV, Excel or HTML, or read them through the API.

How to check the email provider of a domain list

1. Click Try for free (an Apify account is free).
2. Paste your domains into Domains, one per line. Website URLs and email addresses work too — the domain is extracted, www. and duplicates are removed.
3. Keep Probe common DKIM selectors on to also look for DKIM keys.
4. Click Start. Results appear in the Output tab while the run is going.
5. Export the table, or filter provider to split your list into Google Workspace, Microsoft 365 and the rest.

Input example

{
  "domains": ["sap.com", "https://www.zalando.de/about", "info@shopify.com"],
  "checkDkim": true
}

Output example

Real output for sap.com and zalando.de:

[
  {
    "domain": "sap.com",
    "provider": "Microsoft 365",
    "mailboxProviderBehindGateway": null,
    "mxHosts": ["sap-com.mail.protection.outlook.com"],
    "spf": "v=spf1 redirect=_spf.sap.com",
    "spfIncludes": [],
    "dmarc": "v=DMARC1; p=reject; pct=100; adkim=s; aspf=s; rua=mailto:mailauth-reports@sap.com",
    "dmarcPolicy": "reject",
    "dkimFound": ["selector1", "selector2"],
    "mtaSts": false,
    "bimi": false,
    "checkedAt": "2026-10-06T13:59:44.508Z",
    "error": null
  },
  {
    "domain": "zalando.de",
    "provider": "Google Workspace",
    "mailboxProviderBehindGateway": null,
    "mxHosts": ["smtp.google.com", "aspmx.l.google.com", "alt1.aspmx.l.google.com"],
    "spf": "v=spf1 ip4:185.85.220.205 ip4:195.71.68.47 ip4:62.50.54.185 include:_spf.google.com include:spf.protection.outlook.com include:_spf.salesforce.com -all",
    "spfIncludes": ["_spf.google.com", "spf.protection.outlook.com", "_spf.salesforce.com"],
    "dmarcPolicy": "reject",
    "dkimFound": ["google", "k2", "smtp"],
    "mtaSts": false,
    "bimi": true,
    "error": null
  }
]

Use cases

• Cold email & lead lists: split prospects by Google Workspace vs Microsoft 365 before outreach — the two need different sending and warm-up setups.
• Sales intelligence: a company on Microsoft 365 or Google Workspace is a signal for selling add-ons, migrations or security tools. SPF includes also show tools like Salesforce, HubSpot, Zendesk or SendGrid.
• Deliverability & security audits: find domains without DMARC, with p=none, without MTA-STS, or without SPF.
• IT and MSP prospecting: find companies still on a local host or a small provider that may need a migration.
• AI agents: use it as a tool through the Apify MCP server — give it domains, get structured JSON back.

How much does it cost to check a domain's email provider?

Pay per event: $7 per 1,000 checked domains ($0.007 per domain). No subscription, no monthly fee, no extra charge per run.

Domains	Price
100	$0.70
1,000	$7
10,000	$70

Apify's free plan includes $5 of monthly credit, which covers about 700 domains a month at no cost.

You are not charged for domains that do not exist or fail to resolve. They are still returned, with the reason in error.

How it works, and its limits

The Actor asks public DNS resolvers (Cloudflare, Google, Quad9) for the MX, TXT, DMARC, DKIM, MTA-STS and BIMI records of each domain, then matches the MX hostnames against a list of 29 known mail hosts and security gateways.

Please know what it can and cannot see before you buy:

• DKIM selectors are not public. The Actor probes 15 common selectors (google, selector1, selector2, k1, default ...), so an empty dkimFound does not prove that DKIM is missing.
• Domains with their own mail servers show Other / self-hosted, with the MX hosts listed so you can check them.
• It does not verify single email addresses. It tells you where a domain's mail goes, not whether john@company.com exists.
• Results reflect DNS at the time of the run (checkedAt).

FAQ

Which email providers can it detect? Google Workspace, Microsoft 365, Outlook.com, Zoho Mail, Proton Mail, Fastmail, iCloud Mail, Yandex 360, IONOS, STRATO, GMX / WEB.DE, Host Europe, ALL-INKL, Hetzner, OVHcloud, GoDaddy, Hostinger, Namecheap, Amazon SES / WorkMail, Mailgun, SendGrid, Cloudflare Email Routing, and the security gateways Proofpoint, Mimecast, Barracuda, Cisco Secure Email, Hornetsecurity, Trend Micro and Sophos. Missing a provider? Open an issue and it will be added.

How many domains can I check at once? There is no fixed limit. Thousands of domains in one run are fine; duplicates are removed automatically.

Is it legal and GDPR-safe? Yes. It only reads public DNS records that every mail server on the internet reads when it sends an email. It does not visit websites and collects no personal data.

Can I run it on a schedule or from my code? Yes. Use Apify schedules, the REST API, the JavaScript or Python clients, or integrations like Make, Zapier, n8n and Google Sheets.

Why is provider "Proofpoint (gateway)" and not the real host? The MX record points to the security gateway, which filters mail before it reaches the mailbox. The Actor then reads SPF and puts the most likely mailbox host into mailboxProviderBehindGateway.

Other Actors by the same developer

• Tech Stack Detector – Wappalyzer & BuiltWith Alternative — find the CMS, shop system, analytics, CDN and 7,000+ other technologies behind any website list
• Impressum & Imprint Scraper – German Company Data — company name, address, Handelsregister number and VAT ID from German, Austrian and Swiss websites
• Website Contact Scraper – Emails, Phones, Socials — emails, phone numbers, social profiles and named contact people from any website list, with MX check per email

Support

Open an issue on the Actor's Issues tab. Issues are answered within 24 hours.

This Actor was built and is maintained with the help of AI.