Audit DMARC, SPF and MTA-STS of public organisation domains

Created by

Rowcraft

Actor

Domain Email and DNS Checker API: MX, SPF, DMARC, Providers

Email authentication check for the domains of ten public organisations and projects: SPF policy and lookup count, DMARC policy and percentage, MTA-STS, TLS-RPT and BIMI records, an email security score and the problems found, such as a DMARC policy of none or an SPF record over the 10-lookup limit. Paste your own domains to audit them the same way.

Try for free

Domain Email and DNS Checker API: MX, SPF, DMARC, Providersrowcraft/domain-email-dns-checker

Domain checked (without www.)

How the SPF record ends: -all (reject), ~all (soft fail), ?all (neutral), +all (allow everyone), or null

DNS lookups the SPF record costs, counted through the whole include tree (the limit is 10), or null without SPF

DMARC policy: none, quarantine or reject, or null without a valid DMARC record

+6 fields

Input

Domains(required):gov.uk+9

Maximum domains delivered:10

Output fields

Domain checked (without www.)

How the SPF record ends: -all (reject), ~all (soft fail), ?all (neutral), +all (allow everyone), or null

DNS lookups the SPF record costs, counted through the whole include tree (the limit is 10), or null without SPF

DMARC policy: none, quarantine or reject, or null without a valid DMARC record

Share of mail the DMARC policy applies to (pct tag, 100 when not given), or null without DMARC

An MTA-STS record exists in DNS (_mta-sts); the policy file is not fetched; null when the lookup failed

A TLS-RPT record exists in DNS (_smtp._tls); null when the lookup failed

A BIMI record exists (brand logo in the inbox); null when the lookup failed

E-mail security score 0-100 from SPF, DMARC, MTA-STS, TLS-RPT and BIMI (formula in the README); null when a needed lookup failed

Problems found, separated by commas (null when none): no_mx, spf_missing, spf_multiple_records, spf_too_many_lookups, spf_allows_all, spf_neutral, spf_no_all, dmarc_missing, dmarc_none, dmarc_pct_below_100, dmarc_no_reporting, dmarc_invalid, dmarc_multiple_records, single_nameserver

How it works

Sign up on Apify or log in

The Domain Email and DNS Checker API: MX, SPF, DMARC, Providers Actor is ready to run with the inputs already set for "Audit DMARC, SPF and MTA-STS of public organisation domains". Sign up or log in and you'll land in Apify Console with a copy of this exact task.

Start the "Audit DMARC, SPF and MTA-STS of public organisation domains" task

The Domain Email and DNS Checker API: MX, SPF, DMARC, Providers Actor will start running based on the input automatically. You can also change all the input fields, like domains and maximum domains delivered, to match your specific use case.

Receive the "Audit DMARC, SPF and MTA-STS of public organisation domains" output

Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as domain checked (without www.), how the spf record ends: -all (reject), ~all (soft fail), ?all (neutral), +all (allow everyone), or null, DNS lookups the SPF record costs, counted through the whole include tree (the limit is 10), or null without SPF, and more.