{"uid":"cap_8pNWRuCOGjTs25UFw0NQc","slug":"domain-email-spoofing-protection-audit-daa2ce15","name":"Domain Email Spoofing Protection Audit","description":"SPF/DMARC/DKIM email security check. Email spoofing protection of a domain: MX, SPF (record, recursive DNS-lookup count, all qualifier), DMARC (p, sp, pct, rua), MTA-STS policy, TLS-RPT, BIMI, DKIM keys on common selectors, flags and a verdict.","url":"https://domainaudit.genexxis.com/email?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Email domain, e.g. example.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"mx":[],"spf":{"record":"v=spf1 -all","present":true,"allQualifier":"-all","totalLookups":0},"dmarc":{"p":"reject","pct":100,"present":true},"flags":[],"domain":"example.com","spoofingProtection":"protected"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_XZ2wyfdhEZXfaM8B3Z2lV","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a domain's email spoofing protection by checking MX, SPF, DMARC, MTA-STS, TLS-RPT, BIMI, and DKIM records and returning a spoofing verdict.","exampleAgentPrompt":"Can you check whether paypal.com is properly protected against email spoofing? I want to see its SPF, DMARC, and DKIM setup, and get an overall verdict on whether it can be spoofed.","exampleUseCases":[{"title":"Vendor domain spoofing risk check","prompt":"Before we start accepting invoices from acme-supplies.com, can you audit their domain's email security — SPF, DMARC, DKIM, the works — and tell me if someone could spoof emails from them?"},{"title":"Pre-launch email auth verification","prompt":"We're about to go live with our email campaigns from startupco.io — can you check if our SPF and DMARC records are properly set up and whether the domain is protected against spoofing?"},{"title":"Security posture monitoring for brand domain","prompt":"Can you audit the email spoofing protection for microsoft.com and tell me what the DMARC policy is, whether SPF has a valid all-qualifier, and if the domain comes back as protected or vulnerable?"}],"resultDescription":"Returns a JSON object with MX records, SPF record text and metadata (total DNS lookups, all-qualifier), DMARC settings (p, sp, pct, rua), MTA-STS policy, TLS-RPT, BIMI, DKIM keys discovered on common selectors, any warning flags, and a top-level spoofingProtection verdict (e.g. 'protected' or 'vulnerable').","failureModes":["Domain does not exist or has no DNS records — returns empty/null fields","Domain with no SPF or DMARC record — fields present:false, verdict likely 'vulnerable'","SPF record exceeds 10 DNS lookup limit — flagged in flags array","Network timeout resolving DNS — may return partial results or error","Invalid domain format supplied — may return 400 or error response"],"whenToPreferThis":"Use this endpoint when you need a focused, structured audit of a domain's email anti-spoofing posture specifically — MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, and BIMI in one call with a clear verdict. Prefer it over a general DNS lookup when you want pre-interpreted security flags and a spoofing verdict, and over the full domain audit endpoint when you only care about email authentication and not web headers or TLS.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-04T12:35:04.775Z","isFirstParty":false,"canonicalSlug":"domain-email-spoofing-protection-audit-daa2ce15"}