Free Spam Filter Test

Anti-Spam Filters Judge You Before They Read a Word.

See what a spam filter sees before it decides: blocklists, SPF, DKIM, DMARC and mailbox reality.

Try

Trusted by 500,000+ leading GTM teams

From paste to filter verdict

How the anti-spam filter test works

Three steps, no signup, no card. Paste an address you plan to send to, let the nine-check engine score the signals spam filters weigh, read the verdict in two seconds.

001SCREEN

Paste the address

Drop in any address you plan to send to. Gmail, Outlook, custom domains and role inboxes all accepted, one at a time or in bulk.

002SIGNALS

Score the signals

Nine checks weigh the sender signals a filter reads, from authentication and blocklists to disposable domains and role aliases.

003VERDICT

Read the verdict

Inbox, spam folder or blocked, named with the exact signal that tripped and a 0-100 risk score, in about two seconds.

The signals filters weigh

Nine signals, one filter verdict

A filter decides on the sender before it reads a word. These are the nine signals our engine scores, the same ones Gmail, Outlook and SpamAssassin weigh when they choose inbox or spam.

  1. 01

    Syntax

    Every address runs a full RFC 5321 and RFC 5322 compliance pass before a single network call goes out. The engine catches what visual scanning misses, the double dot in [email protected], the trailing period, the IDN homograph that looks valid but resolves to a different domain.

    Bundled typo suggestions let your form offer “did you mean [email protected]?” instead of rejecting silently.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Syntax tile is ringed in the nine-check result board, beside a card showing the parse of matthamnett @ avencera.ai against RFC 5321 and RFC 5322, verdict “Valid format”.
  2. 02

    Domain & MX

    Once syntax passes, the engine resolves the domain. We confirm the DNS records exist, fetch the MX record priority list in order, and verify at least one mail-exchange server is actively accepting connections right now.

    Misspelled domains like gmial.com, expired domains, and parked-for-sale domains all fail this gate before the engine wastes a single SMTP roundtrip.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the MX Record tile is ringed in the result board, beside a card showing the real MX 0 record avencera-ai.mail.protection.outlook.com on Microsoft 365, verdict “MX record found”.
  3. 03

    SMTP handshake

    The engine opens a TCP connection on port 25, performs the EHLO handshake, then negotiates MAIL FROM and RCPT TO. Every server response code (220, 250, 550, 552) is parsed deterministically against the IANA enhanced-status registry.

    This is the moment a mailbox proves it actually exists. No third-party guesses, no statistical heuristics, just the receiving server's own answer.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the SMTP Connect tile is ringed in the result board, beside a card showing the EHLO → MAIL FROM → RCPT TO exchange and the server’s 250 2.1.5 Recipient OK reply, verdict “Mailbox proven”.
  4. 04

    Catch-all detection

    Some domains accept every email regardless of whether the mailbox exists, a setup known as a catch-all configuration. The engine sends a deterministic probe to a deliberately fake address ([email protected]); if the server returns the same 250 OK it returned for the real address, the domain is catch-all.

    The verdict isn't dropped, it's flagged RISKY so you know the deliverability signal is degraded.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Catch-All tile is ringed in the result board, beside a card comparing the real address (250 OK) with a deliberately fake probe (550 rejected), verdict “Validates recipients”.
  5. 05

    Disposable

    The engine maintains a curated registry of 10,247 disposable email providers, including Mailinator, Guerrilla Mail, 10MinuteMail, Tempmail, and the long tail of regional clones.

    Any address matching the blocklist is flagged INVALID. Deliverability to a mailbox that exists for 10 minutes and is never checked is functionally zero, regardless of whether the SMTP handshake passes.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Disposable tile is ringed in the result board, beside a card showing the 10,247-provider throwaway blocklist and no match for avencera.ai, verdict “Legitimate domain”.
  6. 06

    Role address

    info@, support@, no-reply@, admin@, billing@. These are shared inboxes, not individuals.

    The engine extracts the local-part of every address, matches it against the known role-prefix registry, and tags the result with a reduced engagement score.

    You don't drop them automatically. The verdict flags them as roles so you can decide.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Role Address tile is ringed in the result board, beside a card matching the local-part matthamnett against the info@ / support@ / no-reply@ / admin@ role registry with no match, verdict “Personal address”.
  7. 07

    Domain age

    Fresh-spam domains registered hours ago are the single biggest source of inbound abuse. The engine queries WHOIS and RDAP for every unique domain, extracts the registration date, and flags anything under 30 days old with a “fresh” warning.

    Domains aged 5+ years pick up a corresponding trust signal. The same heuristic spam filters have been using since the early 2000s, ported into the verdict.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Domain Age tile is ringed in the result board, beside a card showing the WHOIS creation date 2025-07-10 against the 30-day fresh-spam threshold, verdict “1y old”.
  8. 08

    Email authentication

    SPF, DKIM, and DMARC together prove the sender is authorised to send from that domain.

    The engine reads each policy via DNS, validates SPF includes recursively, scans six common DKIM selectors, and confirms DMARC alignment with the From: header.

    A failing DMARC policy means the sender can be spoofed, so the verdict warns you before you reply.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the DMARC tile is ringed in the result board, beside a card showing the real SPF include, DKIM selector1/selector2 and DMARC p=reject records, verdict “Aligned & enforcing”.
  9. 09

    Mailbox state

    Beyond “exists vs doesn't exist”, the engine extracts the precise mailbox state from the SMTP server's response. Full inbox (552 / 522 quota), disabled mailbox (550 5.1.1), out-of-office autoresponder, frozen account.

    Each state maps to a specific retry policy. Full inbox retries in 6 hours. Disabled drops permanently. The verdict tells you which bucket the bounce belongs in so your retry logic doesn't waste cycles.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Inbox Exists tile is ringed in the result board, beside a card showing the live 250 2.1.5 active reply against the full-inbox and disabled states that drive retry policy, verdict “Inbox confirmed”.
Filter mechanics, explained

What anti-spam filters score first

Modern spam filtering is reputation-first. Most of your spam score comes from who is sending, not what the message says.

Every message you send gets interrogated before a human sees it. The anti-spam filterat Gmail, Microsoft, or a gateway running SpamAssassin assigns a spam score from hundreds of rules, and the surprising part is how little of it comes from your words. Modern spam filtering is reputation-first: who is sending, from which domain, with what authentication, to what kind of list. A sender with a clean record can write “FREE!!!” in the subject and reach the inbox; a sender with a dirty record gets junked on a plain-text note. Your subject line is not what scores your message content.

One test, every signal

Everything the test reads

Filters decide on the sender long before the subject line. This test reads the same signals they weigh, and names the one that would have flagged you.

Verification engine
9

checks on every
address

Every signal is checked live against DNS and the mailbox, never a cached guess.

From a domain or an address

Paste either and the engine screens the sender behind it.

9 checks in parallel

Authentication, blocklists, catch-all, role, domain age.

The verdict, not a score

Inbox, spam folder or blocked, with the signal that tripped.

99.99% accurate

So you fix what filters actually punish, not a guess.

Built for developers

REST API, or drop the MCP server into your agent.

How we stack up

Verifox vs other spam filter tools

Mail-Tester and GlockApps score a test send. Verifox measures the signals filters actually weigh, on credits that never expire.

★ The complete testVerifox
Mail-Tester
GlockApps
Mail-Tester
GlockApps
Mail-Tester
GlockApps
Mail-Tester
GlockApps
Mail-Tester
GlockApps
Mail-Tester
GlockApps
Mail-Tester
GlockApps
Mail-Tester
GlockApps
Mail-TesterN/A
GlockAppsMonthly
What teams are saying

Built for the teams that ship outbound

Growth leads, marketers, and engineers running real campaigns on real lists, with a verified email on every byline.

Thomas George, GTM Lead at Stripe

90% lower bill, 0.4% bounces

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.
Thomas G.GTM Lead, Stripe
Brittany King, GTM Lead at HubSpot

Catch-all finally has a verdict

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.
Brittany K.GTM Lead, HubSpot
Dale Micallef, GTM Lead at Slack

Reputation rebuilt in 6 weeks

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.
Dale M.GTM Lead, Slack
Erica Kovalkoski, GTM Lead at Discord

0.7% bounce on 50k

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.
Erica K.GTM Lead, Discord
Greg Lindsay, GTM Lead at OpenAI

MCP in 10 minutes

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.
Greg L.GTM Lead, OpenAI
Rini Vasana, Product Manager at Vercel

10k/min held under 400ms

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.
Rini V.Product Manager, Vercel
Jonathan Aharon, GTM Lead at MongoDB

Hygiene that doesn't break pipeline

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.
Jonathan A.GTM Lead, MongoDB
Emma Fox, GTM Lead at Linear

Bulk that actually ships

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.
Emma F.GTM Lead, Linear
David Hare, GTM Lead at Snowflake

Scores you can act on

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.
David H.GTM Lead, Snowflake
Pricing

Pay once, or not at all

Most tools reset your balance every month. Verifox sells credits that sit in your account until you spend them.

FreeProve it on your own list before you spend anything.$0

forever

1,000credits on signup

No card required

2,500 with a work email

Free includes

  • All 9 checks included
  • Full API and bulk CSV
  • Catch-all confidence scoring
  • No card required
Most popular
Credit packsBuy once, spend whenever. Slide to price your list.$59

one time

10,000credits

$0.0059 eachSAVE 34%

Everything in Free, plus

  • Credits never expire
  • Verify or find from one pool
  • Up to 79% off at volume
  • No contract, no minimum
Verifox ONECredits land monthly and stack on your balance.$79

per month

15,000credits a month

$0.0053 each

Unused credits roll over

Everything in packs, plus

  • Unused credits roll over
  • Our lowest per-email rate
  • 50 requests per second API
  • Cancel anytime

One credit verifies one address; a find costs 10. All prices in USD, checkout via Stripe.

Trust & compliance

Enterprise-grade security and scale

Every layer of the stack carries a third-party attestation, so you can ship into regulated industries without rebuilding your compliance posture.

  • Claymation Japanese hanko seal in jade-green clay with a twisted shimenawa rope rim, the words SOC 2 TYPE II embossed in cream clay on its face.

    SOC 2 Type II

    Independently audited to the SOC 2 Type II standard.

  • Claymation Japanese hanko seal in cobalt-blue clay with a twisted shimenawa rope rim, the word GDPR embossed in cream clay on its face.

    GDPR

    Built for the EU with full GDPR data-subject rights.

  • Claymation Japanese hanko seal in rose-pink clay with a twisted shimenawa rope rim, the word CCPA embossed in cream clay on its face.

    CCPA

    California opt-out, do-not-sell, plus DSAR handling.

  • Claymation Japanese hanko seal in terracotta clay with a twisted shimenawa rope rim, the text ISO 27001 embossed in cream clay on its face.

    ISO 27001

    Information security held to the ISO 27001 standard.

  • Claymation Japanese hanko seal in lilac-purple clay with a twisted shimenawa rope rim, the text ISO 42001 embossed in cream clay on its face.

    ISO 42001

    AI governance aligned to the new ISO 42001 standard.

Free field manual

The Dead List

An investigation into the money leaking out of your list - and the nine checks that decide whether your email is read, or never arrives at all.

The Dead List field manual, held up by the Verifox fox
Get the free manual

57 pages, free PDF, no signup

Common questions

Anti-spam filters, answered

What teams ask us when their mail starts landing in spam: how filters score senders, what a spam score really means, and which signals are worth fixing first.

What is an anti-spam filter and how does it work?

An anti-spam filter is the software a mailbox provider runs on every incoming message to decide its fate: inbox, spam folder, or outright rejection. Gmail, Microsoft, and open-source filters like SpamAssassin score hundreds of signals, including sender reputation, authentication records, bounce history, recipient engagement, and finally the message content. Most of that score is settled before your subject line is even read, which is why sender hygiene beats clever wording.

How do I test my email against anti-spam filters before sending?

Test the inputs filters weigh heaviest, in order. First, verify every address you plan to send to; the checker above runs 9 checks in about 2 seconds per address.

Then run a full email deliverability test to watch a real send behave, confirm your SPF, DKIM, and DMARC records, and score your sending domain with the domain spam checker. Clean results on those four put you ahead of most senders.

Why do my emails keep getting caught in spam filters?

Reputation, usually. Filters track your domain's bounce rate, spam-trap hits, blocklist listings, and complaint rate, and they keep punishing the pattern long after the offending campaign ends. Content triggers still exist but carry far less weight than they did a decade ago. Start with an email blacklist check to see if you are on a blocklist, then scrub the invalid addresses that caused the bounces in the first place.

What spam score do anti-spam filters use?

There is no universal score. SpamAssassin, the most widely deployed open-source filter, adds points per matched rule and treats anything above 5.0 as spam by default, while Gmail and Microsoft use machine-learned scores they never publish. That is why Verifox reports the sender signals every filter agrees on, mailbox validity, spam-trap risk, authentication, and domain reputation, instead of one number that only applies to one filter.

Do SPF, DKIM, and DMARC help me get past anti-spam filters?

Yes, and they are the entry ticket rather than a bonus. Gmail and Yahoo have required SPF, DKIM, and DMARC for bulk senders since February 2024, and mail that fails alignment gets filtered or rejected before content is even considered. Verifox checks email authentication as one of its 9 verification points, and the dedicated SPF, DKIM, and DMARC checker reads your records back in plain English so you can fix what fails.

Can any tool guarantee my email bypasses anti-spam filters?

No, and treat any tool that promises a bypass as a red flag. Filters are probabilistic, private, and retrained constantly; nobody outside Google can guarantee a Gmail inbox. What you can do is remove every negative signal you control: send only to verified addresses, hold your bounce rate near zero, authenticate your domain, and stay off blocklists. That is the work the Verifox verification engine automates on every address you check.

What is the difference between an anti-spam filter and a spam checker?

Direction. An anti-spam filter sits on the recipient's side and judges incoming mail. A spam checker works on your side, before you send, predicting how those filters will treat you. Verifox is the second kind: it scores the addresses you send to and the domain you send from. To test one address for spam-trap risk, use check email for spam; for your own domain's reputation, the domain spam checker runs the same engine.

How much does list hygiene affect anti-spam filtering?

More than any other factor you control. Mailbox providers read a high bounce rate as a bot or a bought list, and one spam-trap hit can hold a domain in the filter's penalty box for weeks. 20 to 40% of B2B lists fail at catch-all domains, the check most free tools skip. Scrub whole lists with the free email validator before any send; it runs the same 9-point pipeline as this page.

Is this anti-spam filter test really free?

Yes. You get 4 verifications a day on this page with no account. Create a free account and you get 1,000 credits immediately, or 2,500 if you sign up with a work address. No card required. Past that, credits are pay-as-you-go and never expire, with volume pricing shown for your region.

Can I run anti-spam checks from my own app or AI agent?

Yes. The REST API returns the same 9-point verdict at a median 380 ms per address, sub-50 ms cached, and roughly 10,000 emails per minute in bulk on the standard tier.

AI agents can skip the glue code entirely: Verifox ships a native MCP server, so Claude, Cursor, or any MCP client can verify addresses directly. SLA is 99.9% on Starter, 99.99% on an annual Volume contract.