Email Domain Setup Checker (MX, SPF, DMARC, DKIM)

Check how many domains are set up for email in one run, using public DNS only:

• Email provider from MX records. It recognises 22 providers: Google Workspace, Microsoft 365, Zoho Mail, Proofpoint, Mimecast, Barracuda, GoDaddy, IONOS, OVH, Yahoo, iCloud, Fastmail, Proton, Amazon WorkMail / SES, Rackspace, Namecheap, Hostinger, Bluehost, Yandex, Mailgun, Forward Email and Cloudflare Email Routing. Anything else shows as "Other / own server".
• SPF: the record, whether it's valid, and which sending services it allows (Google, Microsoft 365, Mailchimp, SendGrid, Mailgun, Amazon SES, HubSpot, Salesforce, Zendesk, Zoho, Klaviyo, Brevo, Postmark, Freshdesk, Intercom, Shopify, Constant Contact, Mailjet, SparkPost)
• DMARC: the record and its policy (none, quarantine, reject)
• DKIM: which common selectors have keys published
• BIMI: whether a brand logo record exists
• Email auth score (0 to 100) from SPF, DMARC and DKIM

You can paste domains, website addresses or email addresses. For an email address only the domain part is used; the address itself is never stored or shown in the output.

Use it for

• Deliverability checks: check your own or your clients' sending domains; a missing or weak SPF, DKIM or DMARC record hurts inbox placement.
• Email security reviews: find domains in your estate with no DMARC protection against spoofing.
• Migrations and audits: see which email provider and sending services each domain uses before a change.

Output fields

input, domain, hasMx, mxRecords, emailProvider, spf, spfValid, spfSenders, dmarc, dmarcPolicy, dkimSelectorsFound, bimi, emailAuthScore, error.

Each domain in the output is one charged event (domain-checked), including domains that return an error (for example "domain does not exist").

Limits

• DKIM can only be checked for common selector names; a domain may use a selector this tool doesn't try.
• Provider detection is based on MX host names, so a domain behind a filtering service (such as Proofpoint) shows that service rather than the mailbox provider behind it.

Data source and licence

Only public DNS lookups (MX and TXT records), made through the standard DNS resolver of the machine the actor runs on. DNS is a public system designed for automated lookups; the records are published by each domain's owner so that mail servers can read them. No registry (RDAP or WHOIS) lookups, no connections to the domains' mail servers, no SMTP probing and no email verification. The results are facts about domain configuration, not personal data.

Responsible use

• Check domains you own or manage, or that you have a legitimate reason to review.
• Keep Domains checked at the same time modest (the maximum is 50).
• Don't use this tool to build mailing lists or to support unsolicited bulk email. Follow the laws that apply to you (for example UK GDPR, PECR and CAN-SPAM) and Apify's terms.