Paste the domain
Drop in any domain, or an email address on it — we strip it to the domain for you. Verifox screens that domain against the public blocklists and the live DNS records mailbox providers read before accepting mail.
Instant Domain Reputation Scan
Scan any domain for blocklist, DNSBL and sender-reputation risk in 2 seconds.Scan any domain for blocklist, DNSBL, and sender-reputation risk with 99.99% accuracy, plus the exact records behind the score. No signup needed.
Free to run. No signup, no card — one scan covers the whole domain.
Trusted by 500,000+ leading GTM teams
Three steps, no signup, no card. Paste a domain, let the nine-check engine score its blocklist and reputation risk, read the verdict in two seconds.
Drop in any domain, or an email address on it — we strip it to the domain for you. Verifox screens that domain against the public blocklists and the live DNS records mailbox providers read before accepting mail.
Nine checks weigh exactly what mailbox providers weigh: DNSBL and blocklist listings, SPF, DKIM, and DMARC alignment, MX presence, domain age, and catch-all or disposable patterns — each scored live, then folded into one sender-reputation number.
In about two seconds you get a verdict — safe, risky, or blocklisted — with a 0-100 spam score and the exact record that tripped it, so you fix the real cause instead of guessing before your next send.
A domain spam checker reads a domain's reputation back as one score. It measures sender-side risk, not inbox placement, and names the exact signal that tripped.
A domain spam checker answers one question: does this domain carry reputation risk that follows every message it sends? Mailbox providers keep a running judgement of each domain, and the moment it sours, mail starts landing in spam or getting rejected. This tool reads that judgement back as a single domain spam score, built from the same signals the filters watch: whether the domain or its IP sits on a blocklist or DNSBL, whether it publishes MX records and aligned SPF, DKIM, and DMARC, how old the domain is, and whether its address patterns look disposable or catch-all.
Mailbox providers judge the domain before they read the message. These are the nine signals our engine scores, the same ones behind their decision.
Every address runs a full RFC 5321 and RFC 5322 compliance pass before a single network call goes out. The engine catches what visual scanning misses, the double dot in [email protected], the trailing period, the IDN homograph that looks valid but resolves to a different domain.
Bundled typo suggestions let your form offer “did you mean [email protected]?” instead of rejecting silently.


Once syntax passes, the engine resolves the domain. We confirm the DNS records exist, fetch the MX record priority list in order, and verify at least one mail-exchange server is actively accepting connections right now.
Misspelled domains like gmial.com, expired domains, and parked-for-sale domains all fail this gate before the engine wastes a single SMTP roundtrip.


The engine opens a TCP connection on port 25, performs the EHLO handshake, then negotiates MAIL FROM and RCPT TO. Every server response code (220, 250, 550, 552) is parsed deterministically against the IANA enhanced-status registry.
This is the moment a mailbox proves it actually exists. No third-party guesses, no statistical heuristics, just the receiving server's own answer.


Some domains accept every email regardless of whether the mailbox exists, a setup known as a catch-all configuration. The engine sends a deterministic probe to a deliberately fake address ([email protected]); if the server returns the same 250 OK it returned for the real address, the domain is catch-all.
The verdict isn't dropped, it's flagged RISKY so you know the deliverability signal is degraded.


The engine maintains a curated registry of 10,247 disposable email providers, including Mailinator, Guerrilla Mail, 10MinuteMail, Tempmail, and the long tail of regional clones.
Any address matching the blocklist is flagged INVALID. Deliverability to a mailbox that exists for 10 minutes and is never checked is functionally zero, regardless of whether the SMTP handshake passes.


info@, support@, no-reply@, admin@, billing@. These are shared inboxes, not individuals.
The engine extracts the local-part of every address, matches it against the known role-prefix registry, and tags the result with a reduced engagement score.
You don't drop them automatically. The verdict flags them as roles so you can decide.


Fresh-spam domains registered hours ago are the single biggest source of inbound abuse. The engine queries WHOIS and RDAP for every unique domain, extracts the registration date, and flags anything under 30 days old with a “fresh” warning.
Domains aged 5+ years pick up a corresponding trust signal. The same heuristic spam filters have been using since the early 2000s, ported into the verdict.


SPF, DKIM, and DMARC together prove the sender is authorised to send from that domain.
The engine reads each policy via DNS, validates SPF includes recursively, scans six common DKIM selectors, and confirms DMARC alignment with the From: header.
A failing DMARC policy means the sender can be spoofed, so the verdict warns you before you reply.


Beyond “exists vs doesn't exist”, the engine extracts the precise mailbox state from the SMTP server's response. Full inbox (552 / 522 quota), disabled mailbox (550 5.1.1), out-of-office autoresponder, frozen account.
Each state maps to a specific retry policy. Full inbox retries in 6 hours. Disabled drops permanently. The verdict tells you which bucket the bounce belongs in so your retry logic doesn't waste cycles.


Most domain spam checkers ping a handful of blocklists and stop. This one reads the record level too, then folds every signal into one score.
Every record is read live from DNS and the blocklists, never a cached guess.
Scan a domain right here, no account, no card.
Bulk CSV in, every domain scored. Same speed on every plan.
Not just a score, the exact blocklist or record behind it.
So you fix the record that flagged you, not a guess.
1,000 free on signup. 2,500 with a work email. Pay as you go after.
Scanned in memory, dropped on response. SOC 2 · GDPR · CCPA.
MXToolbox and MultiRBL ping blocklists. Verifox reads the record level and the nine-check engine, on credits that never expire.
Most tools reset your balance every month. Verifox sells credits that sit in your account until you spend them.
forever
1,000credits on signup
No card required
2,500 with a work email
Free includes
one time
10,000credits
$0.0059 eachSAVE 34%
Everything in Free, plus
per month
15,000credits a month
$0.0053 each
Unused credits roll over
Everything in packs, plus
One credit verifies one address; a find costs 10. All prices in USD, checkout via Stripe.
Growth leads, marketers, and engineers running real campaigns on real lists, with a verified email on every byline.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.
Every layer of the stack carries a third-party attestation, so you can ship into regulated industries without rebuilding your compliance posture.

Independently audited to the SOC 2 Type II standard.

Built for the EU with full GDPR data-subject rights.

California opt-out, do-not-sell, plus DSAR handling.

Information security held to the ISO 27001 standard.

AI governance aligned to the new ISO 42001 standard.
An investigation into the money leaking out of your list - and the nine checks that decide whether your email is read, or never arrives at all.

57 pages, free PDF, no signup
Common questions
The questions we get from teams that land here to check a domain's spam score, with the real numbers, real limits, and real opinions behind our deliverability stack.
Yes. The checker at the top of this page is free with no account, and one scan covers the whole domain: its blocklist status, MX presence, authentication posture, and spam score in a single pass. You do not spend a credit per address on the domain to learn whether the domain itself is flagged.
When you want the per-mailbox layer too, create a free account for 1,000 credits on the spot (2,500 if your signup email is a work address). Credits are pay-as-you-go, never expire, and volume pricing is shown for your region.
Nine checks run in parallel every time you scan a domain or an address on it, and for this keyword the domain-level ones matter most, so they lead: domain existence and MX record presence, email authentication records (SPF, DKIM, DMARC), domain age and registration history, disposable-domain match, catch-all domain detection, AI-confidence scoring on catch-all addresses, syntax and format validation (RFC 5321 / 5322), SMTP handshake and mailbox-exists ping, and role-address detection.
The verdict then folds public blocklist and DNSBL signals plus sender-reputation risk into one domain spam score, so a flagged domain reads as risky before you ever hit send. If you want the same scan focused on a single address, the email blacklist check runs the very same engine.
Paste the domain (or any address on it) into the field at the top of this page and run the scan. In about two seconds you get a domain spam score with the per-signal breakdown: blocklist and DNSBL listings, MX record presence, the SPF, DKIM, and DMARC status line by line, catch-all and disposable signals, and domain age, all folded into one sender-reputation verdict.
A clean result means the domain isn't sitting on the blocklists we query and its signals look healthy. A risky or flagged result tells you exactly which signal tripped, so you can fix the cause before it costs you. For ongoing monitoring across a portfolio of domains, the API returns the same score on a schedule.
A domain or its sending IP lands on a spam list (a blocklist or DNSBL) when it trips a filter's thresholds: high bounce rates, spam-trap hits, sudden volume spikes, or recipients marking your mail as junk. Once a domain is listed, a large share of its mail quietly routes to the spam folder or gets rejected outright.
The single biggest controllable cause is sending to bad addresses, and catch-all domains make it sneaky: 20-40% of B2B email lists fail at catch-all domains, where every address looks deliverable until the bounces land. Scrub every list with a free email validator before each campaign and you starve the bounce-and-complaint loop that gets a domain flagged as spam in the first place. This checker shows you where the domain stands today; hygiene keeps it clean.
When mail from a custom domain lands in the spam folder, it is almost always a reputation problem, not a content one. The usual culprits are a domain or IP sitting on a blocklist, missing or misaligned SPF, DKIM, and DMARC, a cold domain sending at volume before it is warmed, or a history of bounces and complaints from a dirty list.
Verifox does not filter inboxes, so we can't move a message out of spam for you. What we do is surface the sending-side reputation and blocklist risk that drives the placement, so you can fix the root cause: delist the domain, fix authentication, warm slowly, and clean the list with an email verifier so only deliverable addresses ever enter your sending stream.
No. Every domain and address is processed in memory and discarded the moment the scan completes, never stored, logged, or sold. A domain's blocklist status and DNS records are public data, but which domains you are checking, your prospect lists, your competitors, your own portfolio, is competitive information, and it stays yours.
We're SOC 2 Type II compliant with the full Trust Center report on request. The privacy policyhas the byte-by-byte breakdown of what we touch and what we don't.
Fix the root cause first, then request delisting. Most blocklists run a removal form on their site; the major DNSBLs delist automatically once the abusive pattern stops and your metrics settle. Submitting a removal while the domain is still sending to dead addresses just gets it relisted.
So the durable fix is hygiene: scrub every list with an email verifier before you send, warm new domains slowly, and keep bounce and complaint rates low. Verifox flags the risky addresses so they never enter your sending stream and re-list the domain.
Yes, and one scan per domain goes a long way. Most agencies and outbound teams hold somewhere between a handful and a few hundred sending and client domains, so the 1,000 free signup credits (2,500 with a work email) cover a typical portfolio many times over. Upload the domains as a CSV and the whole portfolio comes back scored in one pass.
Past the free tier, credit packs are pay-as-you-go and never expire, priced for your region, and bulk runs process at roughly 10,000 scans per minute through the API, fast enough to re-score a large domain list before every send window.
They answer two halves of the same question. An email verifier tells you whether a specific address is real and reachable; a domain spam checker tells you whether the domain behind it carries blocklist and reputation risk that will follow every message it sends. Verifox runs the identical nine-check engine for both and returns one verdict.
If you prefer the address-first phrasing, the email blacklist check scans a single address against the same blocklist and reputation signals. All three share the same accuracy, the same verification engine, and the same free tier.
Yes. The REST API reference documents the inbound and outbound shapes for every endpoint, so you can drop real-time domain reputation and blocklist scoring into signup forms, CRMs, or a cron job that re-scores your domain portfolio on a schedule. Median latency runs around 380 ms per scan, sub-50 ms cached, so even a nightly sweep across hundreds of domains finishes in seconds, with live uptime at status.verifox.ai.
Verifox also ships native MCP server support so AI agents (Claude, Cursor, custom LLM apps) can screen a domain before drafting outreach from it, no glue code. Drop the MCP URL into your agent config and the tools are wired.