# Bulk Email Deliverability Checker — MX, SPF, DKIM, DMARC & BIMI (`logiover/bulk-email-deliverability-checker`) Actor Check email deliverability for thousands of domains in bulk. Verifies MX records, parses SPF policies, discovers DKIM selectors, parses DMARC tags and checks BIMI. Returns a detailed deliverability score per domain. No API key — ideal for cold email campaigns and email marketing audits. - **URL**: https://apify.com/logiover/bulk-email-deliverability-checker.md - **Developed by:** [Logiover](https://apify.com/logiover) (community) - **Categories:** Developer tools, Automation - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks - **User rating**: No ratings yet ## Pricing from $3.50 / 1,000 results This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Since this Actor supports Apify Store discounts, the price gets lower the higher subscription plan you have. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/platform/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## Bulk Email Deliverability Checker 📧 — MX, SPF, DKIM, DMARC & BIMI **Check email deliverability for thousands of domains in a single run.** This **bulk email deliverability checker** queries every domain's DNS records for **MX (mail servers), SPF (sender policy), DKIM (signing keys), DMARC (spoofing protection) and BIMI (brand logos)** — the five pillars of email deliverability. Each domain gets a detailed report with **pass/fail per protocol, a parsed policy breakdown, and a numeric 0–100 deliverability score with A+ to F grading**. Paste a list of domains and the actor resolves all DNS records in parallel via **DNS-over-HTTPS**. A single domain with full email config yields a rich row with MX server lists, SPF includes and policy, 30+ probed DKIM selectors, DMARC tags and BIMI SVG URL. > Looking for an **email deliverability checker**, a **bulk SPF/DMARC audit tool**, a **DKIM record finder**, a **BIMI checker**, or a **free email authentication scanner**? This actor does all five protocols at scale. --- ### ✨ Key features - 📬 **5-protocol audit** — MX, SPF, DKIM, DMARC and BIMI checked in a single run per domain. - 🎯 **Numeric score (0–100)** — each protocol carries a weight (MX=25, SPF=25, DMARC=25, DKIM=15, BIMI=8). Graded A+ to F. - 🧩 **Deep SPF parse** — extracts the enforcement policy (+all/~all/-all/?all), counts DNS lookups (RFC limit is 10!), and lists all `include:` mechanisms. - 🔑 **DKIM selector discovery** — probes **31 common selectors** (google, sendgrid, mailgun, docusign, microsoft, etc.) and reports which ones exist. - 📜 **Full DMARC tag parse** — `p` (policy), `pct` (percentage), `rua` (aggregate reports), `ruf` (forensic reports), `sp` (subdomain policy). - 🖼️ **BIMI check** — queries `default._bimi.` and extracts the SVG logo URL if present. - 📋 **Issues list** — human-readable problems found per domain (e.g. "No DMARC record — no protection against domain spoofing"). - ⚡ **High concurrency** — configurable parallel DNS queries (default 10, up to 100). - 🔑 **No API key** — uses public DNS-over-HTTPS (Cloudflare + Google fallback). ### 💡 Use cases - **Cold email campaign prep** — audit the email infrastructure of your prospect list before sending; flag domains with no MX or weak SPF. - **Email deliverability consulting** — run bulk audits for clients, generate scores, and sell remediation plans. - **Brand protection** — find domains in your portfolio that lack DMARC or have weak policies (`p=none`). - **Compliance & security** — SPF/DKIM/DMARC are now table stakes for Google/Yahoo bulk sender requirements (2024+). - **M&A due diligence** — assess the email security posture of an acquisition target's domain portfolio. - **Domain broker / portfolio management** — scan parked and managed domains for email readiness. ### 📦 What you get Each row in the dataset is **one domain's full deliverability report**: | Field | Description | |-------|-------------| | `domain` | The checked domain | | `deliverabilityScore` | Overall score from 0 to 100 | | `grade` | Letter grade: A+, A, B, C, D, F | | `hasMx` | `true`/`false` — MX records exist | | `mxRecords` | Comma-separated MX entries (e.g. `10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com`) | | `mxCount` | Number of MX records | | `hasSpf` | `true`/`false` — valid SPF record exists | | `spfRaw` | Raw SPF TXT value | | `spfPolicy` | Enforcement policy: `hardfail (-all)`, `softfail (~all)`, `neutral (?all)`, `fail (+all)` | | `spfIncludes` | Comma-separated list of SPF include: domains | | `spfLookupCount` | Number of DNS lookups the SPF record triggers | | `hasDmarc` | `true`/`false` — DMARC record at `_dmarc.` | | `dmarcRaw` | Raw DMARC TXT value | | `dmarcPolicy` | DMARC policy: `none`, `quarantine`, `reject` | | `dmarcPct` | Percentage of mail subjected to the policy | | `dmarcRua` | Aggregate report URI | | `dmarcRuf` | Forensic report URI | | `dmarcSubdomainPolicy` | Subdomain policy (`sp` tag) | | `hasDkim` | `true`/`false` — at least one DKIM selector found | | `dkimSelectorsFound` | Comma-separated list of selectors with valid DKIM records | | `dkimSelectorsChecked` | All 31 selectors that were probed | | `hasBimi` | `true`/`false` — BIMI record at `default._bimi.` | | `bimiRaw` | Raw BIMI TXT value | | `bimiSvgUrl` | BIMI logo SVG URL if found | | `passCount` | Number of protocols with a passing config (0–5) | | `totalChecks` | Always `5` | | `issues` | Semicolon-separated list of problems found | | `resolver` | Which DNS resolver answered (`cloudflare` or `google`) | | `checkedAt` | ISO 8601 timestamp | #### Example output ```json [ { "domain": "stripe.com", "deliverabilityScore": "95", "grade": "A+", "hasMx": "true", "mxRecords": "10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com, 30 alt2.aspmx.l.google.com", "mxCount": "3", "hasSpf": "true", "spfRaw": "v=spf1 include:_spf.google.com include:_spf.stripe.com -all", "spfPolicy": "hardfail (-all)", "spfIncludes": "_spf.google.com, _spf.stripe.com", "spfLookupCount": "2", "hasDmarc": "true", "dmarcRaw": "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@stripe.com", "dmarcPolicy": "reject", "dmarcPct": "100", "dmarcRua": "mailto:dmarc@stripe.com", "hasDkim": "true", "dkimSelectorsFound": "google, mailgun", "hasBimi": "true", "bimiSvgUrl": "https://bimi.stripe.com/logo.svg", "passCount": "5", "totalChecks": "5", "issues": null, "resolver": "cloudflare", "checkedAt": "2026-06-24T12:00:00.000Z" } ] ```` ### 🚀 How to use it 1. Click **Try for free / Start**. 2. Paste your list of domains into **Domains** — one per line (`example.com` or `https://example.com`, both work). 3. (Optional) Adjust **Max Concurrency** for large lists and keep **Proxy** enabled. 4. Click **Save & Start**, then export the dataset as **JSON, CSV, Excel or via API**. ### ⚙️ Input | Field | Type | Description | Default | |-------|------|-------------|---------| | `domains` | array (required) | Domains to check email deliverability for. Schemes and paths stripped automatically. | – | | `maxConcurrency` | integer | Parallel DNS queries. Higher is faster but may hit rate limits. | `10` (max `100`) | | `proxyConfiguration` | object | Proxy used for DNS-over-HTTPS requests. | Apify Proxy (datacenter) | #### Example input ```json { "domains": ["stripe.com", "github.com", "mailchimp.com", "shopify.com"], "maxConcurrency": 10, "proxyConfiguration": { "useApifyProxy": true } } ``` ### 🔍 How it works For each domain, the actor runs a series of **DNS-over-HTTPS** queries against Cloudflare (`cloudflare-dns.com`) with an automatic Google (`dns.google`) fallback: 1. **MX** — queries type `MX`, parses priority + hostname. 2. **SPF** — queries type `TXT`, finds the record starting `v=spf1`, parses policy and includes. 3. **DMARC** — queries type `TXT` at `_dmarc.`, parses all DMARC tags. 4. **DKIM** — queries type `TXT` at `._domainkey.` for 31 common selectors (`google`, `sendgrid`, `mailgun`, `microsoft`, `docusign`, etc.). 5. **BIMI** — queries type `TXT` at `default._bimi.`, extracts SVG URL. Each protocol contributes to the deliverability score: MX=25, SPF=25 (hardfail policy gets full points), DMARC=25 (reject policy gets full points), DKIM=15, BIMI=8. Bonus: +2 if ≥2 MX records (redundancy). ### 🧰 Tips & best practices - Run on your own domain first to see what a "good" score looks like — then benchmark prospects and vendors. - Filter by `deliverabilityScore` ascending to prioritize domains with the worst email infrastructure. - Filter by `dmarcPolicy: "none"` to find domains vulnerable to exact-domain spoofing. - Check `spfLookupCount` — values > 10 violate the SPF RFC and may cause authentication failures. - The DKIM selector list is comprehensive but not exhaustive; custom selectors won't be found unless they match common names. - Export to CSV and share the report with non-technical stakeholders as an email security scorecard. ### ❓ FAQ #### How do I check email deliverability for many domains? Paste your full domain list and run the actor. It checks MX, SPF, DKIM, DMARC and BIMI for every domain via DNS-over-HTTPS and returns one row per domain with a score. #### What's the difference between this and a regular DNS lookup? This actor goes beyond raw DNS — it **parses SPF policies**, finds DKIM selectors by probing common names, parses DMARC tags, checks BIMI, calculates a deliverability score, and flags specific issues in human-readable form. #### Does it check email addresses or mailboxes? No — this is a **domain-level** email deliverability audit. It checks the DNS configuration that determines whether email from (or to) a domain will be delivered, not individual mailbox validity. For email address verification, see our [Bulk Email Verifier](https://apify.com/logiover/bulk-email-verifier). #### Which DKIM selectors are probed? 31 common selectors: `google`, `default`, `dkim`, `selector1`, `selector2`, `mail`, `s1`, `s2`, `k1`, `k2`, `key1`, `key2`, `amazonses`, `sendgrid`, `mailgun`, `mandrill`, `sparkpost`, `postmark`, `mimecast`, `proofpoint`, `docusign`, `zendesk`, `hubspot`, `salesforce`, `pm`, `protonmail`, `protonmail2`, `protonmail3`, `ms365`, `microsoft`, `outlook`. #### Can I export deliverability reports to CSV? Yes — each domain is one row with columns for every protocol, score, grade and parsed policies. Download as **CSV, JSON or Excel**, or pull through the REST API. ### 🔗 Related actors by the same author - **[Bulk DNS Records Lookup](https://apify.com/logiover/bulk-dns-records-lookup)** — raw DNS record resolver (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) via DNS-over-HTTPS. - **[Bulk Email Verifier](https://apify.com/logiover/bulk-email-verifier)** — validate individual email addresses (syntax, SMTP, catch-all detection). - **[Bulk SSL Certificate Checker](https://apify.com/logiover/bulk-ssl-certificate-checker)** — SSL/TLS certificate inspection for domains. - **[Bulk WHOIS / RDAP Lookup](https://apify.com/logiover/bulk-whois-rdap-lookup)** — domain registration, registrar and expiry data. ### 📝 Changelog #### 2026-06-24 - Initial release — 5-protocol email deliverability audit (MX, SPF, DKIM, DMARC, BIMI), weighted scoring, 31 DKIM selectors probed, no API key, CSV/JSON export. # Actor input Schema ## `domains` (type: `array`): List of domains to check email deliverability for. One entry per domain, e.g. example.com. Schemes (https://) and paths are stripped automatically. ## `maxConcurrency` (type: `integer`): How many domains to check in parallel. Higher is faster. ## `proxyConfiguration` (type: `object`): Proxy used for DNS-over-HTTPS requests. Recommended to avoid rate limiting. ## Actor input object example ```json { "domains": [ "google.com", "github.com", "stripe.com", "mailchimp.com" ], "maxConcurrency": 10, "proxyConfiguration": { "useApifyProxy": true } } ``` # Actor output Schema ## `results` (type: `string`): The dataset containing one row per domain with MX, SPF, DKIM, DMARC and BIMI audit results and a deliverability score. # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "domains": [ "google.com", "github.com", "stripe.com", "mailchimp.com" ] }; // Run the Actor and wait for it to finish const run = await client.actor("logiover/bulk-email-deliverability-checker").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "domains": [ "google.com", "github.com", "stripe.com", "mailchimp.com", ] } # Run the Actor and wait for it to finish run = client.actor("logiover/bulk-email-deliverability-checker").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "domains": [ "google.com", "github.com", "stripe.com", "mailchimp.com" ] }' | apify call logiover/bulk-email-deliverability-checker --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=logiover/bulk-email-deliverability-checker", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "Bulk Email Deliverability Checker — MX, SPF, DKIM, DMARC & BIMI", "description": "Check email deliverability for thousands of domains in bulk. Verifies MX records, parses SPF policies, discovers DKIM selectors, parses DMARC tags and checks BIMI. Returns a detailed deliverability score per domain. No API key — ideal for cold email campaigns and email marketing audits.", "version": "1.0", "x-build-id": "ZOBozdZFrVEqfOkcq" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/logiover~bulk-email-deliverability-checker/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-logiover-bulk-email-deliverability-checker", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/logiover~bulk-email-deliverability-checker/runs": { "post": { "operationId": "runs-sync-logiover-bulk-email-deliverability-checker", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/logiover~bulk-email-deliverability-checker/run-sync": { "post": { "operationId": "run-sync-logiover-bulk-email-deliverability-checker", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "domains" ], "properties": { "domains": { "title": "Domains", "type": "array", "description": "List of domains to check email deliverability for. One entry per domain, e.g. example.com. Schemes (https://) and paths are stripped automatically.", "items": { "type": "string" } }, "maxConcurrency": { "title": "Max Concurrency", "minimum": 1, "maximum": 100, "type": "integer", "description": "How many domains to check in parallel. Higher is faster.", "default": 10 }, "proxyConfiguration": { "title": "Proxy Configuration", "type": "object", "description": "Proxy used for DNS-over-HTTPS requests. Recommended to avoid rate limiting.", "default": { "useApifyProxy": true } } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```