What this checks
Without sending anything, we validate the address syntax, confirm the domain accepts mail, identify the provider, and flag free webmail, disposable services and role mailboxes. We also look at the domain's SPF, DKIM and DMARC because a domain that cannot be spoofed is a domain you can trust an introduction from. The score is a risk estimate for onboarding and KYC-style intake, not a deliverability guarantee. Bulk checks are available through the API.
Need to know the mailbox exists?
This check never talks to the recipient's mail server, so it cannot confirm a mailbox. The bulk email verifier and the email verification API add that mailbox check and accept-all detection; both are in early access.
Email address check: questions
Does this tool check whether an email address exists?+
No. It never connects to the recipient's mail server, so it cannot confirm that a mailbox exists or will accept mail. It checks what can be known without sending anything: the address syntax, whether the domain has MX records or a null MX, the mail provider, free, disposable and role flags, and the domain's SPF, DKIM and DMARC.
What is a role-based email address?+
An address for a function rather than a person, such as info@, support@, sales@, admin@ or noreply@. Several people may read it, or nobody, so it says little about who is on the other end of a sign-up or introduction. The check flags common role names and ignores any +tag, so [email protected] counts as a role address.
How are disposable email addresses detected?+
By domain. The check matches the address against a list of known temporary-mail domains and also flags domain names containing words such as temp, trash, disposable, throwaway, fake, burner or 10min. New disposable services appear all the time, so a clean result does not prove an address is permanent.
How is the email risk score calculated?+
Points per risk signal, capped at 100: 60 if the domain does not resolve or has a null MX, 35 with no MX, 50 for a disposable domain, 15 for a role address, 10 for free webmail, 10 each for missing SPF or DMARC (5 for p=none), and 5 when a non-webmail domain shows no DKIM key. 50 or more is high, 20 to 49 medium, below 20 low.
Can I check a list of email addresses at once?+
Yes, through the EmailSecOps REST API: POST /api/v1/intel/emails takes up to 100 addresses per request and returns the same checks as the web tool for each one. The API is part of the paid plans; the web tool checks one address at a time.