Pricing

Pay per usage

Try for free

Go to Apify Store

Email Spoofability Checker (SPF, DMARC, DKIM, MX)

Try for free

Checks whether anyone can send email pretending to be a domain. Grades each domain A-F from public DNS and returns the exact DNS records to change. No emails are sent, no login needed.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Kacper

Actor stats

Bookmarked

Total users

Monthly active users

14 days ago

Last modified

What you get per domain

Field	Meaning
`grade` / `gradeLetter`	`A` properly configured · `B` minor gaps · `C` partially protected · `D` effectively spoofable · `F` spoofable today
`spoofable`	`true` for D and F
`spfStatus`, `spfRecord`	`present`, `missing`, or `permerror_multiple` (more than one SPF record — RFC 7208 says receivers must treat that as an error)
`dmarcStatus`, `dmarcPolicy`, `dmarcRecord`	whether DMARC exists and whether it enforces (`quarantine`/`reject`) or only monitors (`none`)
`dkimSelectors`	DKIM keys with a usable (non-empty) public key at common selectors; revoked keys and wildcard records are detected and not counted
`mxStatus`, `mxRecords`	whether the domain receives mail
`problems[]`	each with `severity`, `finding` (plain language) and `fix` (what to publish)
`report`	optional Markdown report you can forward as-is
`error`	set when a domain could not be graded (e.g. it does not exist)

Input

{
  "domains": ["example.com", "https://www.github.com/about", "someone@company.co.uk"],
  "includeMarkdownReport": true,
  "maxConcurrency": 10
}

Bare domains, URLs and email addresses are all accepted. Duplicates are removed.

Typical uses

Agencies and MSPs: audit a client list before onboarding; attach the Markdown report to the proposal.
Sales and lead qualification: find companies whose domain is spoofable today.
Security reviews: check every domain a company owns, including the ones that never send mail.
Monitoring: schedule the Actor weekly and alert when a grade drops.

What it does not do

DKIM is best-effort. Only common selectors are probed (google, default, selector1, selector2, k1, s1, mail). A missing DKIM result does not lower the grade, because the key may live under a custom selector.
It does not test deliverability, inbox placement or blocklists.
It does not send test messages and cannot see private DNS.
A domain that does not exist (NXDOMAIN) is reported as an error, not graded.

Pricing

Free to run while in early access: you pay only standard Apify platform usage (a few seconds of compute per run). Pay-per-graded-domain pricing will be announced in advance; domains that cannot be graded will never be charged.

About

Same analyzer as the open-source MCP server io.github.Integrity-Os/deliverability-doctor, listed in the official MCP registry. MIT licensed.

University Email Checker

tomas.nosek/university-email-checker

Check whether an email belongs to a university domain.

Tomas Nosek

Bulk Email Deliverability Checker — MX, SPF, DKIM, DMARC & BIMI

logiover/bulk-email-deliverability-checker

Check email deliverability for thousands of domains in bulk. Verifies MX records, parses SPF policies, discovers DKIM selectors, parses DMARC tags and checks BIMI. Returns a detailed deliverability score per domain. No API key — ideal for cold email campaigns and email marketing audits.

Logiover

Bulk Email Deliverability Checker (MX/SPF/DMARC/DKIM)

weiseer/email-deliverability-checker

Bulk-check domains for email setup & authentication over DNS: MX + provider, SPF, DMARC policy, DKIM selectors, with a deliverability score. One JSON row per domain.

wei seer

Domain Checker — WHOIS, DNS & SSL Lookup API

vivid_astronaut/domain-checker

Check domain availability and fetch WHOIS records, DNS records, and SSL certificate details in one call. Supports bulk domain lists — useful for domain research, brand monitoring, and infrastructure audits.

BRAINIALL Team

Email Validation Api

ghewaretech/email-validation-api

Validate email addresses at scale with enterprise-grade accuracy. This API performs comprehensive email verification including syntax validation, DNS/MX record checks, disposable email detection, and optional SMTP mailbox verification.

Unisuraksha Tracking Systems Pvt Ltd

DMARC Checker

onescales/dmarc-checker

Simple DMARC record lookup tool. Check email security configuration for multiple domains in a single run.

One Scales

5.0

(2)

Bulk Email Verifier — MX, Disposable & Deliverability

haketa/bulk-email-verifier

Verify thousands of emails at once: syntax, MX/domain check, disposable & role-based detection, free-provider flag and a deliverability score. Fast, cheap, keyless bulk email validation for lead lists and list cleaning.

Haketa

Email Deliverability & DNS Security Auditor (SPF, DKIM, DMARC)

plotbench/email-dns-security-auditor

Check email deliverability and DNS security for any list of domains: SPF, DKIM, DMARC, MX, DNSSEC, MTA-STS, TLS-RPT and BIMI audited in one run. Deterministic scoring, actionable findings, no API keys.

Plotbench Studio

Email Security DNS Validator (DMARC/SPF/DKIM)

sootesting/email-security-dns-validator

Validate email security DNS records for any domain: DMARC, SPF, DKIM. Outputs structured validation results. Pay-per-event.

soot

MX Record Checker

automation-lab/mx-record-checker

This actor checks MX records for domains to identify email hosting providers and mail server configuration. It queries MX records, sorts by priority, and detects providers (Google Workspace, Microsoft 365, ProtonMail, etc.). Useful for email deliverability auditing and provider identification.