Check Email Domain
check_email_domainFull email posture for a domain: can it receive mail, and can it be spoofed?
Runs MX, SPF and DMARC lookups together and returns a plain-language verdict alongside the raw records: can_receive_mail, spoofable, and a list of specific findings. Use this as the default check before emailing an unfamiliar domain, when judging whether inbound mail claiming to be from a domain could be forged, or when auditing your own domains. Prefer this over the single-record tools unless you already know which record you need.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain to check, e.g. "example.com". A full email address is accepted and the domain is taken from it. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| mx | No | ||
| spf | No | ||
| dmarc | No | ||
| domain | Yes | ||
| summary | Yes | Plain-language verdict. | |
| findings | No | One line per specific problem; empty when the domain is correctly configured. | |
| spoofable | Yes | True unless DMARC is present AND at an enforcing policy. Deliberately conservative: without enforcement a receiver has no instruction to reject forged mail, however good the SPF record is. | |
| checked_at | No | ||
| can_receive_mail | Yes | False when the domain publishes no MX records. |