Bulk Email Deliverability Checker — MX, SPF, DKIM, DMARC & BIMI Audit (No API)

Check the email deliverability of thousands of domains in a single run. This bulk email deliverability checker queries every domain's DNS for the five pillars of inbox placement — MX (mail servers), SPF (sender policy), DKIM (signing keys), DMARC (spoofing protection) and BIMI (brand logos) — and returns a detailed report for each domain: pass/fail per protocol, a parsed policy breakdown, a numeric 0–100 deliverability score, an A+ to F grade, and a plain-English list of issues. Paste a domain list and the Actor resolves everything in parallel over DNS-over-HTTPS. Fast, no browser, no API key, no login.

🏆 Why this email deliverability checker?

5-protocol audit (MX · SPF · DKIM · DMARC · BIMI) · 29 fields per domain · 31 DKIM selectors probed · thousands of domains per run · weighted 0–100 score + A+→F grade · direct DNS-over-HTTPS (no browser, no API key) · export to JSON / CSV / Excel. The unofficial bulk SPF/DMARC audit tool and email authentication scanner for cold-email prep, deliverability consulting and brand protection.

---

✨ What this Actor does / Key features

• 📬 5-protocol audit — MX, SPF, DKIM, DMARC and BIMI checked in a single pass per domain, the complete email-authentication stack.
• 🎯 Numeric score (0–100) — each protocol carries a weight (MX = 25, SPF = 25, DMARC = 25, DKIM = 15, BIMI = 8, +2 redundancy bonus for ≥2 MX records). Every domain is graded A+, A, B, C, D or F.
• 🧩 Deep SPF parse — extracts the enforcement policy (+all / ~all / -all / ?all), counts the DNS lookups the record triggers (the RFC 7208 limit is 10), and lists every include: mechanism.
• 🔑 DKIM selector discovery — probes 31 common selectors (google, sendgrid, mailgun, amazonses, microsoft, docusign, protonmail, etc.) and reports which ones actually exist.
• 📜 Full DMARC tag parse — p (policy), pct (percentage of mail enforced), rua (aggregate reports), ruf (forensic reports) and sp (subdomain policy).
• 🖼️ BIMI check — queries default._bimi.<domain> and extracts the brand-logo SVG URL when present.
• 📋 Human-readable issues list — plain-English problems per domain (e.g. "No DMARC record — no protection against domain spoofing", "SPF has 12 DNS lookups (RFC limit is 10)").
• ⚡ High concurrency — configurable parallel DNS queries (default 10, up to 100) so large lists finish fast.
• 🛰️ Resilient resolution — Cloudflare DNS-over-HTTPS with automatic Google DNS fallback; the answering resolver is recorded per row.
• 🔑 No API key, no login — uses public DNS-over-HTTPS only. Just an Apify account.

🚀 Quick start (3 steps)

1. Configure — paste your list of domains into Domains, one per line (example.com or https://example.com — schemes and paths are stripped automatically).
2. Run — click Start. The Actor resolves MX, SPF, DKIM, DMARC and BIMI for every domain in parallel and streams one report row per domain into your dataset.
3. Get your data — open the Output tab and export to JSON, CSV, Excel or XML, or pull it via the Apify API. Sort by deliverabilityScore to surface the weakest domains first.

📥 Input

Give the Actor at least one entry in domains. Everything else is optional.

Example — audit a cold-email prospect list

{
  "domains": ["stripe.com", "github.com", "mailchimp.com", "shopify.com"],
  "maxConcurrency": 10,
  "proxyConfiguration": { "useApifyProxy": true }
}

Example — bulk SPF/DMARC compliance scan of your own portfolio

{
  "domains": [
    "brand-main.com",
    "brand-shop.com",
    "brand-newsletter.com",
    "brand-support.com"
  ],
  "maxConcurrency": 20,
  "proxyConfiguration": { "useApifyProxy": true }
}

Example — fast, high-concurrency scan of a large domain list

{
  "domains": ["example1.com", "example2.com", "example3.com", "…thousands more…"],
  "maxConcurrency": 100,
  "proxyConfiguration": { "useApifyProxy": true }
}

Field	Type	Description
domains	array	Domains to check email deliverability for — one entry per domain (e.g. example.com). Schemes (https://) and paths are stripped automatically and duplicates are de-duplicated. Required.
maxConcurrency	integer	How many domains to check in parallel. Higher is faster but may hit resolver rate limits. Default 10, minimum 1, maximum 100.
proxyConfiguration	object	Apify Proxy settings used for the DNS-over-HTTPS requests. Recommended (default: { "useApifyProxy": true }) to avoid rate limiting on large lists.

Tip: Run your own domain first to see what a "good" score looks like, then benchmark prospects, vendors and acquisition targets against it.

📤 Output

One row per domain — 29 fields, exportable to JSON, CSV, Excel or XML. Here is a trimmed sample record:

{
  "domain": "stripe.com",
  "deliverabilityScore": "95",
  "grade": "A+",
  "hasMx": "true",
  "mxRecords": "10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com, 30 alt2.aspmx.l.google.com",
  "mxCount": "3",
  "hasSpf": "true",
  "spfRaw": "v=spf1 include:_spf.google.com include:_spf.stripe.com -all",
  "spfPolicy": "hardfail (-all)",
  "spfIncludes": "_spf.google.com, _spf.stripe.com",
  "spfLookupCount": "2",
  "hasDmarc": "true",
  "dmarcRaw": "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@stripe.com",
  "dmarcPolicy": "reject",
  "dmarcPct": "100",
  "dmarcRua": "mailto:dmarc@stripe.com",
  "dmarcRuf": null,
  "dmarcSubdomainPolicy": null,
  "hasDkim": "true",
  "dkimSelectorsFound": "google, mailgun",
  "hasBimi": "true",
  "bimiSvgUrl": "https://bimi.stripe.com/logo.svg",
  "passCount": "5",
  "totalChecks": "5",
  "issues": null,
  "resolver": "cloudflare",
  "checkedAt": "2026-07-06T12:00:00.000Z"
}

💡 Use cases

• Cold email campaign prep — audit the email infrastructure of your prospect list before sending; flag domains with no MX or weak SPF so you skip risky sends and protect your sender reputation.
• Email deliverability consulting — run bulk audits for clients, generate A+→F scorecards, and sell remediation plans off the issues column.
• Brand protection — find domains in your portfolio that lack DMARC or run a weak p=none policy and are therefore exposed to exact-domain spoofing.
• Google & Yahoo bulk-sender compliance — SPF, DKIM and DMARC are table stakes for bulk senders since 2024; grade every sending domain before it causes authentication failures.
• M&A due diligence — assess the email-security posture of an acquisition target's entire domain portfolio in one run.
• Domain broker / portfolio management — scan parked and managed domains for email readiness and resale value.

👥 Who uses it

Cold-email & lead-gen teams · email deliverability consultants & agencies · email-marketing and CRM operators · brand-protection and security teams · MSPs and IT admins · domain brokers & portfolio managers · M&A and due-diligence analysts.

💰 Pricing

This Actor runs on a simple pay-per-result model — you pay for the domain reports you generate, with no separate Apify platform fees to calculate. Try it on the free tier first, then scale up. See the Pricing tab on this page for the current rate.

❓ Frequently Asked Questions

Is it legal to check email deliverability for these domains? Yes. The Actor only reads publicly published DNS records (MX, SPF, DKIM, DMARC, BIMI) — the same data any mail server queries to route and authenticate email. You are responsible for using the results in compliance with applicable laws such as GDPR and the terms of the services involved.

Is there a public email deliverability API? Is this an API alternative? There is no single free public API that returns MX + SPF + DKIM + DMARC + BIMI parsed and scored together. This Actor works as that email authentication API alternative — it resolves all five record types over public DNS-over-HTTPS and returns a structured, scored report per domain with no API key.

Do I need an API key or a login? No. There is no account, login or API key for any third-party service required — only an Apify account. Resolution runs over public Cloudflare and Google DNS-over-HTTPS.

How do I check email deliverability for many domains at once? Paste your full domain list into Domains and run the Actor. It checks MX, SPF, DKIM, DMARC and BIMI for every domain in parallel and returns one scored row per domain.

How much data can I check / how many domains can I scan? You can scan thousands of domains per run. Throughput is governed by maxConcurrency (up to 100 parallel domains). Note that each domain triggers ~36 DNS queries (MX + SPF + DMARC + 31 DKIM selectors + BIMI), so keep the proxy enabled on very large lists to avoid resolver rate limits.

Can I export deliverability reports to CSV or JSON? Yes. Each domain is one row with columns for every protocol, the score, the grade and the parsed policies. Download the dataset as CSV, JSON, Excel or XML, or pull it through the Apify REST API.

Does it check individual email addresses or mailboxes? No — this is a domain-level email deliverability audit. It checks the DNS configuration that determines whether mail from (or to) a domain authenticates and gets delivered, not individual mailbox validity. For address-level checks, see our Bulk Email Verifier.

How do I bulk check SPF and DMARC records for a domain list?

Paste your domains into the input and the checker resolves SPF and DMARC (plus MX, DKIM and BIMI) for every domain in parallel over DNS-over-HTTPS, returning a parsed policy breakdown — SPF enforcement + lookup count, DMARC p/pct/rua/ruf/sp — for each one.

Which DKIM selectors are probed?

31 common selectors: google, default, dkim, selector1, selector2, mail, s1, s2, k1, k2, key1, key2, amazonses, sendgrid, mailgun, mandrill, sparkpost, postmark, mimecast, proofpoint, docusign, zendesk, hubspot, salesforce, pm, protonmail, protonmail2, protonmail3, ms365, microsoft, outlook. Custom selectors that don't match these common names won't be discovered — DKIM selectors are not enumerable from DNS by design.

What's the difference between this and a plain DNS lookup?

A raw DNS lookup just returns records. This Actor parses them: it decodes SPF policies and counts lookups, discovers DKIM selectors by probing, parses every DMARC tag, checks BIMI, computes a weighted 0–100 deliverability score with an A+→F grade, and flags specific issues in plain English. For raw records, use our Bulk DNS Records Lookup.

Does it meet the Google and Yahoo bulk-sender requirements check?

Yes. It verifies the SPF, DKIM and DMARC authentication that Google and Yahoo now require from bulk senders and grades each domain A+ to F, so you can fix gaps before they cause delivery failures.

How do I audit a cold-email prospect list before sending?

Run your prospect domains through the checker and sort by deliverabilityScore ascending to surface domains with no MX or weak SPF; filter dmarcPolicy: none to find spoofable domains. Skip or warm up the risky ones before you send.

🔗 More B2B, email & website data tools by logiover

Building a full outreach / domain-intelligence pipeline? Pair this checker with the rest of the email, DNS and website suite:

Actor	What it does
Bulk DNS Records Lookup	Raw DNS resolver (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) over DNS-over-HTTPS
Bulk Email Verifier	Validate individual email addresses — syntax, MX, SMTP, catch-all detection
Bulk SSL Certificate Checker	SSL/TLS certificate inspection, expiry and chain details for domains
Bulk WHOIS / RDAP Lookup	Domain registration, registrar, nameservers and expiry data
Bulk HTTP Security Headers	Audit HSTS, CSP, X-Frame-Options and other security headers in bulk
Bulk URL Status Checker	Bulk HTTP status, redirect chains and response-time checks
Website Contact Scraper	Extract emails, phones and social links from any list of websites
Subdomain Finder	Discover subdomains of a domain for full attack-surface / asset mapping
Certificate Transparency Monitor	Track newly issued TLS certificates for a domain via CT logs
B2B Lead Scraper	Build B2B company + contact lead lists by sector and country

👉 Browse all logiover scrapers on Apify Store — 180+ actors across real estate, jobs, crypto, social media & B2B data.

⏰ Scheduling & integration

Schedule this Actor on Apify to re-audit your sending domains or prospect lists daily or weekly and catch DMARC/SPF drift the moment it happens. Export results to JSON, CSV or Excel, sync to Google Sheets, or push to your database, BI tools and webhooks through the Apify API. Connect it to Make, n8n or Zapier to trigger alerts when a domain's deliverabilityScore drops or its dmarcPolicy weakens.

⭐ Support & feedback

Found a bug or need an extra field or DKIM selector? Open an issue on the Issues tab — response is usually fast. If this Actor saves you time, a ★★★★★ review on the Store page genuinely helps and is hugely appreciated. 🙏

⚖️ Legal

This Actor reads only publicly published DNS records and is intended for legitimate email-deliverability, security-research and lead-generation use. You are responsible for complying with GDPR, the terms of service of the services involved, and any applicable local laws when using the data.

---

📝 Changelog

2026-07-06

• ✨ README overhaul: added shields badges, ready-to-run example scenarios, a complete 29-field output reference, expanded high-intent FAQ, and a cross-linked email/DNS/website tool grid.

2026-07-01

• Maintenance pass: re-verified end-to-end on live data and confirmed successful runs within the 5-minute quality window on the default input.
• Sharpened Store metadata (SEO title & description) and expanded the FAQ with high-intent, long-tail questions for easier discovery in Google and Apify Store search.
• Added ready-to-run example tasks that cover common real-world use cases.

2026-06-24

• Initial release — 5-protocol email deliverability audit (MX, SPF, DKIM, DMARC, BIMI), weighted scoring, 31 DKIM selectors probed, no API key, CSV/JSON export.