Paste the address
Drop any email into the pill. Gmail, Outlook, custom domains, role aliases. Single address now, bulk CSV on signup.
Instant Domain Age Read
See how old any email's domain is and flag newly registered, throwaway domains with 99.99% accuracy, single or in bulk, on the same 9-point engine our paid API runs. No signup, no card.
Trusted by 500,000+ leading GTM teams of all sizes
From paste to verdict
Three steps, no signup, no card on file. Paste any email or domain, watch the nine-check engine estimate the domain age and weigh it against the other risk signals, read the verdict in two seconds.
Drop any email into the pill. Gmail, Outlook, custom domains, role aliases. Single address now, bulk CSV on signup.
Nine checks fire in parallel. Syntax, DNS, SMTP, catch-all, disposable, role, age, auth, mailbox state. Verdict in about two seconds.
Valid, invalid, or risky. Plus a confidence score, the per-check breakdown, and a recommended retry policy. Read on the page or via API.
The 9-point engine
The same nine-check engine our paid email verification API runs. Every email, every verification, every time.
Every address runs a full RFC 5321 and RFC 5322 compliance pass before a single network call goes out. The engine catches what visual scanning misses, the double dot in alice@verifox..ai, the trailing period, the IDN homograph that looks valid but resolves to a different domain.
Bundled typo suggestions let your form offer “did you mean alice@gmail.com?” instead of rejecting silently.

Once syntax passes, the engine resolves the domain. We confirm the DNS records exist, fetch the MX record priority list in order, and verify at least one mail-exchange server is actively accepting connections right now.
Misspelled domains like gmial.com, expired domains, and parked-for-sale domains all fail this gate before the engine wastes a single SMTP roundtrip.

The engine opens a TCP connection on port 25, performs the EHLO handshake, then negotiates MAIL FROM and RCPT TO. Every server response code (220, 250, 550, 552) is parsed deterministically against the IANA enhanced-status registry.
This is the moment a mailbox proves it actually exists. No third-party guesses, no statistical heuristics, just the receiving server's own answer.

Some domains accept every email regardless of whether the mailbox exists, a setup known as a catch-all configuration. The engine sends a deterministic probe to a deliberately fake address (zzz9k7q@domain.com); if the server returns the same 250 OK it returned for the real address, the domain is catch-all.
The verdict isn't dropped, it's flagged RISKY so you know the deliverability signal is degraded.

The engine maintains a curated registry of 10,247 disposable email providers, including Mailinator, Guerrilla Mail, 10MinuteMail, Tempmail, and the long tail of regional clones.
Any address matching the blocklist is flagged INVALID. Deliverability to a mailbox that exists for 10 minutes and is never checked is functionally zero, regardless of whether the SMTP handshake passes.

info@, support@, no-reply@, admin@, hello@, billing@, contact@. These are shared inboxes, not individuals.
The engine extracts the local-part of every address, matches it against the known role-prefix registry, and tags the result with a reduced engagement score.
You don't drop them automatically. The verdict tells you they're roles so you can decide whether they belong in your outbound.

Fresh-spam domains registered hours ago are the single biggest source of inbound abuse. The engine queries WHOIS and RDAP for every unique domain, extracts the registration date, and flags anything under 30 days old with a “fresh” warning.
Domains aged 5+ years pick up a corresponding trust signal. The same heuristic spam filters have been using since the early 2000s, ported into the verdict.

SPF, DKIM, and DMARC together prove the sender is authorised to send from that domain.
The engine reads each policy via DNS, validates SPF includes recursively, scans six common DKIM selectors for a published key, and confirms DMARC alignment with the From: header.
A failing DMARC policy means the sender can be spoofed, so the verdict warns you before you reply.

Beyond “exists vs doesn't exist”, the engine extracts the precise mailbox state from the SMTP server's response. Full inbox (552 / 522 quota), disabled mailbox (550 5.1.1), out-of-office autoresponder, frozen account.
Each state maps to a specific retry policy. Full inbox retries in 6 hours. Disabled drops permanently. The verdict tells you which bucket the bounce belongs in so your retry logic doesn't waste cycles.

How we stack up
Same nine-check pipeline, the highest published accuracy, credits that never expire, and an MCP server no competitor offers. Head-to-head with the two providers our buyers shortlist.
| Feature | Verifox | NeverBounce | ZeroBounce |
|---|---|---|---|
| Published accuracy claim | 99.99% | 99.0% | 99.6% |
| Credits expire | Never | Yes | Never |
| Free credits on signup | 1,000–2,500 / one-time | 1,000 / monthly | 100 / monthly |
| Verify without signup | |||
| Catch-all resolution | AI confidence | Flagged only | AI scoring |
| Real-time API | |||
| Bulk CSV upload | |||
| MCP server for AI agents | |||
| SOC 2 + GDPR + CCPA |
What teams are saying
Growth leads, marketers, and engineers running real campaigns on real lists. Specific numbers, specific tools they switched from, and a verified email address on every byline.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.
Why this one
Most free domain age checkers just echo a WHOIS date and stop. Ours runs the full nine-check pipeline the paid plans use, weighing the domain age estimate against disposable, catch-all, and reputation signals so a freshly registered, throwaway domain reads as risky on its own, capped only on volume.
The free tier runs the full nine-check pipeline from our email verification API, capped on volume and never on accuracy.
Verify your first emails right here with no signup at all. Create a free account when you go past four checks a day.
Your free plan unlocks the very same REST API, CSV upload, and bulk parallel processing that the paid plans run on.
Addresses are processed in memory and dropped on response, nothing stored and nothing sold. Read the privacy policy.
Domain age, explained
An email age checkeranswers a deceptively useful question: how old, and how established, is the domain behind this address? The everyday phrasing is “how old is this email's domain,” and the reason people ask is almost always risk. This tool reads the domain age back to you and folds it into a single verdict, alongside the same signals our verification engine already watches: whether the domain looks disposable, whether it is catch-all, and what its domain reputation looks like.
The reason age is such a strong signal is economic. A newly registered domain is cheap and disposable, which is exactly why spammers, fraud rings, and throwaway-account farms cycle through fresh domains constantly. A domain that has existed for years represents a real, hard-to-fake investment. So when a brand-new domain shows up on a signup form, a sales lead, or a payment, that age alone is worth a second look, and it gets far more damning when it lines up with a spammy domain reputation or a disposable pattern. Verifox surfaces all of those at once instead of making you stitch separate lookups together.
One honest caveat: domain age is an estimate and a risk signal, not a notarized creation date. WHOIS records are often privacy-protected or redacted, so where the data is public we read it directly, and where it isn't we place the domain into an age band from corroborating signals. Either way the output that matters is the same. To screen single addresses on the same engine, use the free email checker; to run domain age and risk at scale, the verification API returns the same verdict programmatically, with pay-as-you-go pricing for your region.
Trust & compliance
Every layer of the stack carries a third-party attestation, so you can ship into regulated industries without rebuilding your compliance posture.

Independently audited to the SOC 2 Type II standard.

Built for the EU with full GDPR data-subject rights.

California opt-out, do-not-sell, plus DSAR handling.

Information security held to the ISO 27001 standard.

AI governance aligned to the new ISO 42001 standard.
Common questions
The questions we get from teams that land here to see how old an email's domain is, with the real numbers, real limits, and real opinions behind our verification stack.
Yes. You can run 4 checks per day from this page without an account. No card, no signup.
Create a free account and you get 1,000 checks on the spot, or 2,500 if your signup email is a work address. After that, credits are pay-as-you-go and never expire on any paid plan, with volume pricing shown for your region.
Paste the email address (or just the domain) into the field at the top of this page and run the check. In about two seconds you get the estimated domain age alongside the full per-check breakdown, so you can see at a glance whether the address sits on an established domain or a freshly registered one.
The age read folds into the overall verdict rather than standing alone. A long-lived domain with clean signals returns safe; a domain registered days ago, or one paired with disposable and catch-all patterns, returns risky. If you only need a single address verified at a time, the free email checker runs the very same engine.
Domain age is one of the cleanest legitimacy signals there is. Spammers, fraudsters, and throwaway-account farms churn through newly registered domains by the thousand, because a domain that gets burned this week is cheap to replace next week. A domain that has quietly existed for years, by contrast, represents a real investment somebody is unlikely to torch on abuse.
So the age of an email's domain is a strong proxy for risk. A brand-new domain on a signup form, a sales lead, or a payment is worth a second look, especially when it lines up with other red flags like a disposable domain or a poor domain reputation. Verifox surfaces all of those signals in one verdict.
Nine checks run in parallel every time you check an address or a domain, scoring both the domain and the mailbox behind it. Domain age is one of them:
The verdict folds the domain age estimate together with sender-reputation and blocklist risk so a fresh, throwaway-looking domain reads as risky before it ever reaches your funnel. To screen a domain's reputation specifically, the domain spam checker runs the very same engine.
Not always to the day, and we're honest about that. Plenty of domains hide their WHOIS records behind privacy services or registrar redaction, so a guaranteed creation date isn't available for every domain on earth. That is why Verifox treats domain age as an estimate and a risk signal, not a notarized timestamp.
Where the data is public, we read it directly. Where it is redacted, we lean on corroborating signals (DNS history, certificate history, MX and reputation posture) to place the domain into an age band. Either way the output that matters is the same: established and trustworthy, or new and worth scrutiny.
Yes, indirectly but meaningfully. Mailbox providers are wary of mail from domains with no track record, so a brand-new sending domain typically has to be warmed slowly before it earns inbox placement. Send at volume from a cold, freshly registered domain and a large share of that mail quietly routes to spam.
On the receiving side, the age of the domains you mail also matters. Lists padded with throwaway addresses on disposable, days-old domains bounce and generate complaints, which drags down your own sender reputation. Scrub every list with the free email checker first and you keep those risky domains out of your sending stream.
No. Addresses and domains are processed in memory and discarded the moment the check completes. Nothing logged, nothing retained, nothing sold.
We're SOC 2 Type II compliant with the full Trust Center report on request. Read the privacy policy for the byte-by-byte breakdown of what we touch and what we don't.
Yes. The free tier gives you 1,000 checks (2,500 if you sign up with a work email), so this doubles as a bulk domain age checker for most small lists outright.
For larger lists, our paid credit packs are pay-as-you-go and never expire, with pricing localized to your region on the pricing page. CSV upload, API access, and bulk parallel processing are included from the free tier up.
Median latency is around 380 ms for a single check, sub-50 ms for cached results. Bulk processing runs at roughly 10,000 checks per minute on the standard tier.
SLA is 99.9 % uptime on Starter, 99.99 % with an annual Volume contract. Full real-time uptime + incident history at status.verifox.ai. Implementation details in the API docs.
Yes. The REST API reference documents the inbound and outbound shapes for every endpoint, so you can drop real-time domain age and risk scoring into signup forms, CRMs, or any tool that speaks REST. HubSpot, Salesforce, Zapier, Klaviyo, Mailchimp, and Brevo all connect out of the box.
Verifox also ships native MCP server support so AI agents (Claude, Cursor, custom LLM apps) can score domain age without glue code. Drop the MCP URL into your agent config and the tools are wired. Credits are pay-as-you-go, never expire, and are refundable for the first 30 days, with full terms in the refund policy.