Pricing

Rating

Developer

Actor stats

Categories

Share

DMARC / SPF / DKIM Validator

Audit email authentication DNS records for any domain to catch deliverability killers and compliance gaps. Missing or misconfigured SPF, DMARC, and DKIM records cause emails to land in spam, fail authentication checks, and leave domains open to spoofing. Validate hundreds of domains in bulk with structured results that flag every issue.

Features

• Three-protocol coverage — validates SPF, DMARC, and DKIM records in a single run
• Bulk domain processing — scan hundreds of sender domains with configurable concurrency
• DKIM selector scanning — checks common selectors (default, selector1, selector2, google, mail, smtp) with support for custom lists
• Issue detection — flags missing records, syntax errors, overly permissive policies, and DNS lookup limits
• DMARC policy parsing — extracts policy, subdomain policy, percentage, and reporting URIs
• SPF validation — checks syntax, mechanism order, and estimates DNS lookup count
• Raw record inclusion — optionally include full DNS TXT records for debugging
• Charge limit support — respects the Apify max charge per run to control costs

Input

Input Example

{
"domains":["example.com","newsletter.example.com"],
"dkimSelectors":["default","selector1","selector2","google","mailchimp"],
"stopAfterFirstValidDkim":true,
"includeRawRecords":true
}

Output

Each domain produces one dataset item with detailed SPF, DMARC, and DKIM validation results.

Key fields:

• domain (string) — the domain that was validated
• hasSpf / spfValid (boolean) — whether an SPF record exists and passes validation
• hasDmarc / dmarcPolicy (boolean / string) — whether DMARC exists and its enforcement policy
• hasDkim / dkimValidSelectors (boolean / array) — whether valid DKIM records were found and which selectors
• spf (object) — full SPF analysis with record, validity, mechanisms, and issues
• dmarc (object) — full DMARC analysis with policy, reporting URIs, and issues
• dkim (object) — per-selector DKIM results with validity status
• issues (array) — consolidated list of all problems found across protocols

Output Example

{
"domain":"example.com",
"checkedAt":"2025-03-09T14:30:00.000Z",
"hasSpf":true,
"spfValid":true,
"spf":{
"found":true,
"record":"v=spf1 include:_spf.google.com ~all",
"isValid":true,
"issues":[]
},
"hasDmarc":true,
"dmarcPolicy":"reject",
"dmarc":{
"found":true,
"policy":"reject",
"subdomainPolicy":"reject",
"percentage":100,
"reportingUris":["mailto:dmarc@example.com"],
"isValid":true,
"issues":[]
},
"hasDkim":true,
"dkimValidSelectors":["google"],
"dkim":{
"selectorsChecked":["default","selector1","google"],
"validSelectors":["google"],
"selectors":[
{
"selector":"google",
"found":true,
"isValid":true,
"issues":[]
}
]
},
"issues":[]
}

Pricing

Set ACTOR_MAX_TOTAL_CHARGE_USD to control maximum spending per run.

Use Cases

• Email deliverability audits — validate SPF, DMARC, and DKIM before launching email campaigns to avoid spam placement
• Domain security compliance — audit all company domains for proper email authentication as part of SOC 2 or security reviews
• Client onboarding for agencies — scan new client domains to identify email authentication gaps before taking over email marketing
• Ongoing monitoring — schedule weekly checks to catch broken records after DNS changes or provider migrations
• Spoofing risk assessment — identify domains with missing or permissive DMARC policies that are vulnerable to phishing

Related Actors

Notes

• SPF validation is lightweight — it checks syntax and common misconfigurations but does not perform full RFC 7208 processing.
• DKIM requires knowing the selector. The actor checks common selectors by default, but if your domain uses a custom selector (e.g., mailchimp, sendgrid), add it to the dkimSelectors input.
• Increasing the number of DKIM selectors increases DNS query count proportionally.