# DNS + Email Footprint Profiler - MX, SPF, DMARC, SaaS Stack (`fetchcraft/dns-email-footprint`) Actor

Bulk DNS + email + SaaS vendor profile from any domain list. Pure DNS over HTTPS (Google + Cloudflare resolvers), no scraping. Returns MX vendor (Google Workspace, M365, etc), SPF status, DMARC policy, DKIM signals, nameserver, CDN, hosting, and 25+ SaaS verification TXT signals. $0.01 per domain.

- **URL**: https://apify.com/fetchcraft/dns-email-footprint.md
- **Developed by:** [Emily Ward](https://apify.com/fetchcraft) (community)
- **Categories:** Lead generation, Business, Developer tools
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

$0.90 / 1,000 domain dns + email + saas profiles

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

Actors are web data automations that power AI and operations. They run on the Apify platform to scrape websites, process data, connect APIs, and automate workflows.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.
Actors are written with capital "A".

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.
The best way to integrate Actors is as follows.

- **AI agents and MCP clients** — the [Apify MCP server](https://docs.apify.com/integrations/mcp.md) at `https://mcp.apify.com` (remote, streamable HTTP, OAuth on first use).
- **Agentic workflows and local Actor development** — [Agent Skills](https://apify.com/.well-known/agent-skills/index.json) with the [Apify CLI](https://docs.apify.com/cli/docs.md): `npm install -g apify-cli`, then `apify login`.
- **JavaScript/TypeScript projects** — the official [JS/TS client](https://docs.apify.com/api/client/js/docs.md): `npm install apify-client`.
- **Python projects** — the official [Python client](https://docs.apify.com/api/client/python/docs.md): `pip install apify-client`.
- **Any other language** — the [REST API](https://docs.apify.com/api/v2.md).

For usage examples, see the [API](#api) section below.

For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt).

# README

## DNS + Email + Cloud Footprint Profiler

![DNS + Email Footprint Profiler - MX, SPF, DMARC, SaaS Stack](https://ai-sales-personalizer.vercel.app/og/dns-email-footprint.png)

Given a list of domains, returns a rich technographic profile based on public DNS records. Pure DNS over HTTPS (Google + Cloudflare resolvers), no scraping, no auth, fast and accurate.

### What it returns

- **MX provider**: Google Workspace, Microsoft 365, Proofpoint, Mimecast, Cisco, Zoho, Fastmail, ProtonMail, self-hosted, etc.
- **SPF status**: record present, syntactically valid, all-mechanism strictness.
- **DKIM signals**: common selector probes (google, k1, selector1, dkim).
- **DMARC policy**: none, quarantine, reject, percentage.
- **Nameserver host**: Cloudflare, Route53, GoDaddy, Namecheap, Dynadot, etc.
- **CDN / proxy**: Cloudflare, Akamai, Fastly, CloudFront, Sucuri (from CNAME / IP range).
- **Hosting**: AWS, GCP, Azure, DigitalOcean, Hetzner, OVH (from PTR / IP block).
- **SaaS signals from TXT verification records**: Atlassian, Salesforce, HubSpot, Stripe, Adobe, Zoom, Webex, AWS SES, SendGrid, Postmark, Mailgun, Klaviyo, Intercom, Zendesk, Notion, Linear, GitHub Pages.
- **Domain age hint**: from registrar TTL signals (best-effort, since WHOIS isn't queried).

### Why use this

- **Sales targeting**: identify "lives on Microsoft 365" or "uses SendGrid" prospects in bulk.
- **Security**: surface domains missing SPF/DMARC, easy phishing targets.
- **Migration teams**: audit a portfolio's current email + DNS posture before consolidation.
- **Investors / analysts**: triangulate vendor stack across a target list.

### Input

```json
{ "domains": ["airbnb.com", "stripe.com", "github.com"] }
```

### Pricing

- **US$0.01 per domain.** Pay per domain checked.
- Preview mode runs the first domain free.

### Output

```json
{
  "domain": "stripe.com",
  "mx_provider": "Google Workspace",
  "mx_records": ["aspmx.l.google.com", "alt1.aspmx.l.google.com"],
  "spf_pass": true,
  "spf_record": "v=spf1 include:_spf.google.com ~all",
  "dmarc_policy": "reject",
  "dmarc_percent": 100,
  "dkim_selectors_found": ["google"],
  "ns_provider": "Cloudflare",
  "name_servers": ["matt.ns.cloudflare.com", "olga.ns.cloudflare.com"],
  "cdn_provider": "Cloudflare",
  "hosting_provider": "AWS",
  "saas_signals": ["AWS SES", "Atlassian", "SendGrid", "Stripe verification"],
  "checked_at": "2026-05-31T09:00:00Z"
}
```

### Pairs well with

- **[shopify-store-detector](https://apify.com/fetchcraft/shopify-store-detector)**: For Shopify targets, layer in 25+ app fingerprints. $0.03 per store.
- **[wordpress-stack-detector](https://apify.com/fetchcraft/wordpress-stack-detector)**: For WP targets, layer in 30+ plugin fingerprints. $0.02 per site.
- **[saas-spend-scanner](https://apify.com/fetchcraft/saas-spend-scanner)**: Estimate monthly spend per detected vendor. $0.01 to $0.03.
- **[ai-sales-personalizer](https://apify.com/fetchcraft/ai-sales-personalizer)**: Reference detected MX/SaaS vendors in outreach. $0.10 to $0.20 per lead.

### Limitations

- DoH resolvers can occasionally return SERVFAIL on misconfigured domains. The actor retries once via the alternate resolver.
- DKIM detection is selector-probe based (the standard 8 selectors). Custom selectors won't appear in `dkim_selectors_found` but the record may still exist.

### Integrations

This actor works out of the box with every Apify-supported integration:

- **API**: call via Apify API or any official SDK (Python, JavaScript, PHP, .NET). Returns a clean dataset URL.
- **Schedule**: set a daily, weekly, or custom cron cadence in Apify Console. Combine with `notification` for fresh feeds.
- **Webhooks**: wire `ACTOR.RUN.SUCCEEDED` to Slack, Discord, Zapier, Make, n8n, Pipedream, or any HTTPS endpoint.
- **MCP**: this actor is discoverable through Apify's hosted MCP server at `mcp.apify.com` for Claude, Cursor, Cline, Windsurf, and other MCP clients.
- **n8n / Make / Zapier**: native HTTP-Request integration. Trigger the actor on schedule, pipe results to Google Sheets, Airtable, your CRM, or any database.

### Try it free

Every Apify user gets **$5/month in free platform credits** (around 250 events at this actor's per-event price). Run preview mode first to confirm output shape before scaling.

New to Apify? [Sign up here](https://apify.com/sign-up?fpr=fetchcraft) to get free credits on signup.

### What's New

- 2026-06-03: Metadata, categories, and SEO refreshed. Latest version live on Apify Store.

### Last Updated

2026-06-03

# Actor input Schema

## `domains` (type: `array`):

Domains to profile (e.g. "example.com").

## `preview` (type: `boolean`):

Run only the first domain. Free, no charge.

## Actor input object example

```json
{
  "domains": [
    "airbnb.com",
    "stripe.com",
    "github.com"
  ],
  "preview": false
}
```

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "domains": [
        "airbnb.com",
        "stripe.com",
        "github.com"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("fetchcraft/dns-email-footprint").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "domains": [
        "airbnb.com",
        "stripe.com",
        "github.com",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("fetchcraft/dns-email-footprint").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "domains": [
    "airbnb.com",
    "stripe.com",
    "github.com"
  ]
}' |
apify call fetchcraft/dns-email-footprint --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,fetchcraft/dns-email-footprint"
        }
    }
}

```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/1IEtGE3QfHo4KjjUS/builds/1HR3wKzMT2tko6ejT/openapi.json