Bulk DNS Lookup & Email Security Checker (MX, SPF, DMARC, DKIM)
Pricing
$2.00 / 1,000 results
Bulk DNS Lookup & Email Security Checker (MX, SPF, DMARC, DKIM)
Bulk DNS lookup for domains, URLs or emails: A, AAAA, MX, NS, TXT, CNAME, SOA, CAA, plus SPF, DMARC, DKIM, MTA-STS, TLS-RPT and BIMI checks, mail and DNS provider detection, verified SaaS services, issues and an email security score.
Pricing
$2.00 / 1,000 results
Rating
0.0
(0)
Developer
Patrick Hebert
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
3 days ago
Last modified
Categories
Security
Limited permissionsShare
Check thousands of domains (or website URLs or email addresses) in one run: full DNS records plus an email authentication audit with SPF, DMARC, DKIM, MTA-STS, TLS-RPT and BIMI, mail provider and DNS host detection, and SaaS tools revealed by TXT verification records. Uses public DNS-over-HTTPS (Cloudflare, Google fallback). No key, login or proxy.
Use cases
- Cold email & deliverability: check prospects' or your own sending domains for SPF/DMARC/DKIM problems.
- Lead enrichment & tech stack: see who uses Google Workspace vs Microsoft 365, Cloudflare vs GoDaddy DNS, and which tools (HubSpot, Stripe, Atlassian, Zoom...) a company has verified.
- MSPs & security audits: grade a client list and output concrete issues (no DMARC, p=none, SPF +all, too many SPF lookups...).
- Domain portfolios & migrations: export every record type in bulk.
Input
Output (one row per domain)
domain, mailProvider, dnsProvider, emailSecurityGrade, emailSecurityScore, issues, spfRecord, spfAll, spfIncludes, spfDnsLookups, sendingServices, dmarcRecord, dmarcPolicy, dmarcSubdomainPolicy, dmarcPct, dmarcRua, dkimSelectorsFound, mtaSts, tlsRpt, bimi, verifiedServices, a, aaaa, mx, ns, txt, cname, soa, caa. Non-existent (NXDOMAIN) or invalid domains return found: false and are not charged.
Pricing
Pay per result (per domain that resolves).
Notes
The score and grade are this actor's own heuristic (SPF 25, DMARC 35 + 5 for reporting, DKIM 20, MTA-STS/TLS-RPT/BIMI 5 each), not an industry standard. DKIM can only be found on known selectors; a custom selector may exist even when none is found. Provider detection is based on MX/NS hostnames and may say Other for less common hosts. Only public DNS is queried; no emails are sent.
