# Domain Email Spoofing Protection Audit

> Domain Email Spoofing Protection Audit is a paid API for AI agents from domainaudit.genexxis.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-29).

Audits a domain's email spoofing protection by checking MX, SPF, DMARC, MTA-STS, TLS-RPT, BIMI, and DKIM records and returning a spoofing verdict.

## Facts

- Endpoint: GET https://domainaudit.genexxis.com/email?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-email-spoofing-protection-audit-daa2ce15
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_8pNWRuCOGjTs25UFw0NQc

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-email-spoofing-protection-audit-daa2ce15
```

Example prompt: Can you check whether paypal.com is properly protected against email spoofing? I want to see its SPF, DMARC, and DKIM setup, and get an overall verdict on whether it can be spoofed.

## When to prefer this

Use this endpoint when you need a focused, structured audit of a domain's email anti-spoofing posture specifically — MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, and BIMI in one call with a clear verdict. Prefer it over a general DNS lookup when you want pre-interpreted security flags and a spoofing verdict, and over the full domain audit endpoint when you only care about email authentication and not web headers or TLS.

## Known failure modes

- Domain does not exist or has no DNS records — returns empty/null fields
- Domain with no SPF or DMARC record — fields present:false, verdict likely 'vulnerable'
- SPF record exceeds 10 DNS lookup limit — flagged in flags array
- Network timeout resolving DNS — may return partial results or error
- Invalid domain format supplied — may return 400 or error response

## How this service works

Deterministic security audit of a website or domain, computed live: HTTP security headers graded A-F with a fix per failed check, TLS certificate and protocol (expiry, chain trust, hostname match, legacy TLS), email anti-spoofing (SPF with recursive DNS-lookup count, DMARC, MTA-STS, TLS-RPT, BIMI, DKIM on common selectors), DNS (A/AAAA/NS/CAA), RDAP registration data, security.txt and robots.txt. The full audit returns a 0-100 score and the top 5 fixes. Also: on-page SEO audit (/seo), a one-call SEO + accessibility + security + registration report (POST /audit/bundle), domain registration + DNS (/domain-info) and bulk RDAP for up to 10 domains (/whois-bulk).

## Output

Returns a JSON object with MX records, SPF record text and metadata (total DNS lookups, all-qualifier), DMARC settings (p, sp, pct, rua), MTA-STS policy, TLS-RPT, BIMI, DKIM keys discovered on common selectors, any warning flags, and a top-level spoofingProtection verdict (e.g. 'protected' or 'vulnerable').

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Email domain, e.g. example.com"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "mx": [],
  "spf": {
   "record": "v=spf1 -all",
   "present": true,
   "allQualifier": "-all",
   "totalLookups": 0
  },
  "dmarc": {
   "p": "reject",
   "pct": 100,
   "present": true
  },
  "flags": [],
  "domain": "example.com",
  "spoofingProtection": "protected"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-email-spoofing-protection-audit-daa2ce15/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from domainaudit.genexxis.com](https://www.zero.xyz/host/domainaudit.genexxis.com/llms.txt)