Enter a domain
Drop in any domain whose mail server you want to test. No login, no account, nothing to install. A single domain is all the SMTP test needs to start.
SMTP server test
Enter any domain to find the mail server that receives its email, see whether mail has somewhere to land, and learn which provider runs it. No signup.
Trusted by 500,000+ leading GTM teams of all sizes
No login, no install. Enter any domain and Verifox resolves the mail server that answers SMTP for it, then shows whether mail has somewhere to land and which provider runs it.
Drop in any domain whose mail server you want to test. No login, no account, nothing to install. A single domain is all the SMTP test needs to start.
Verifox runs a live domain mail-server lookup, matching the routing step our verification engine resolves before opening the SMTP handshake directly with the receiving server.
See which mail server answers for the domain, whether mail has somewhere to land, and which provider runs it. That is the deliverability signal a verification starts from.
One question, answered live: if I send mail to this domain, is there a server ready to take it?
An SMTP test answers one question: is there a live server ready to accept mail for this domain? The test resolves the domain to its mail server, opens an SMTP connection, and reads the handshake. A healthy server accepts the connection and signals it will receive mail; one that refuses or times out means mail bound for it bounces.
The same nine-check engine our paid email verification API runs. Every email, every verification, every time.
Every address runs a full RFC 5321 and RFC 5322 compliance pass before a single network call goes out. The engine catches what visual scanning misses, the double dot in [email protected], the trailing period, the IDN homograph that looks valid but resolves to a different domain.
Bundled typo suggestions let your form offer “did you mean [email protected]?” instead of rejecting silently.


Once syntax passes, the engine resolves the domain. We confirm the DNS records exist, fetch the MX record priority list in order, and verify at least one mail-exchange server is actively accepting connections right now.
Misspelled domains like gmial.com, expired domains, and parked-for-sale domains all fail this gate before the engine wastes a single SMTP roundtrip.


The engine opens a TCP connection on port 25, performs the EHLO handshake, then negotiates MAIL FROM and RCPT TO. Every server response code (220, 250, 550, 552) is parsed deterministically against the IANA enhanced-status registry.
This is the moment a mailbox proves it actually exists. No third-party guesses, no statistical heuristics, just the receiving server's own answer.


Some domains accept every email regardless of whether the mailbox exists, a setup known as a catch-all configuration. The engine sends a deterministic probe to a deliberately fake address ([email protected]); if the server returns the same 250 OK it returned for the real address, the domain is catch-all.
The verdict isn't dropped, it's flagged RISKY so you know the deliverability signal is degraded.


The engine maintains a curated registry of 10,247 disposable email providers, including Mailinator, Guerrilla Mail, 10MinuteMail, Tempmail, and the long tail of regional clones.
Any address matching the blocklist is flagged INVALID. Deliverability to a mailbox that exists for 10 minutes and is never checked is functionally zero, regardless of whether the SMTP handshake passes.


info@, support@, no-reply@, admin@, billing@. These are shared inboxes, not individuals.
The engine extracts the local-part of every address, matches it against the known role-prefix registry, and tags the result with a reduced engagement score.
You don't drop them automatically. The verdict flags them as roles so you can decide.


Fresh-spam domains registered hours ago are the single biggest source of inbound abuse. The engine queries WHOIS and RDAP for every unique domain, extracts the registration date, and flags anything under 30 days old with a “fresh” warning.
Domains aged 5+ years pick up a corresponding trust signal. The same heuristic spam filters have been using since the early 2000s, ported into the verdict.


SPF, DKIM, and DMARC together prove the sender is authorised to send from that domain.
The engine reads each policy via DNS, validates SPF includes recursively, scans six common DKIM selectors, and confirms DMARC alignment with the From: header.
A failing DMARC policy means the sender can be spoofed, so the verdict warns you before you reply.


Beyond “exists vs doesn't exist”, the engine extracts the precise mailbox state from the SMTP server's response. Full inbox (552 / 522 quota), disabled mailbox (550 5.1.1), out-of-office autoresponder, frozen account.
Each state maps to a specific retry policy. Full inbox retries in 6 hours. Disabled drops permanently. The verdict tells you which bucket the bounce belongs in so your retry logic doesn't waste cycles.


An MX lookup is a read-only window into how a domain receives email. In one query you learn who runs the mail, how it routes, and if its sendable
The same DNS resolution the Verifox verification engine runs first on every address it checks.
The MX hosts name the provider — Google Workspace, Microsoft 365, Proofpoint, or a self-hosted server.
Records return lowest-number-first, so you read the primary server and its fallbacks straight away.
No MX record, or a broken one, means mail bounces before it is ever sent.
An MX lookup starts the story; verifying the address confirms the mailbox itself is real.
An MX lookup is only the first step. Verifying the address confirms the mailbox is real and deliverable.
The single most useful thing a mail exchanger lookup tells you — who to talk to about mail.
MXToolbox, GMass, and Mailtrap check server responses; Verifox also identifies providers plainly and verifies real mailboxes.
Most tools reset your balance every month. Verifox sells credits that sit in your account until you spend them.
forever
1,000credits on signup
No card required
2,500 with a work email
Free includes
one time
10,000credits
$0.0059 eachSAVE 34%
Everything in Free, plus
per month
15,000credits a month
$0.0053 each
Unused credits roll over
Everything in packs, plus
One credit verifies one address; a find costs 10. All prices in USD, checkout via Stripe.
Growth leads, marketers, and engineers running real campaigns on real lists, with a verified email on every byline.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.
Every layer of the stack carries a third-party attestation, so you can ship into regulated industries without rebuilding your compliance posture.

Independently audited to the SOC 2 Type II standard.

Built for the EU with full GDPR data-subject rights.

California opt-out, do-not-sell, plus DSAR handling.

Information security held to the ISO 27001 standard.

AI governance aligned to the new ISO 42001 standard.
An investigation into the money leaking out of your list - and the nine checks that decide whether your email is read, or never arrives at all.

57 pages, free PDF, no signup
Common questions
FAQs about SMTP testing: what the handshake proves, which ports matter, what error codes mean & where SMTP fits alongside email verification.
An SMTP test checks whether a domain’s mail server is reachable and willing to receive email. It resolves the domain to the server that handles its mail, opens an SMTP connection, and reads how the server replies to the opening handshake. Type a domain into the tool above and Verifox runs a live lookup of its mail servers, names the host that receives the domain’s email, and shows whether mail has somewhere to land.
It is the fastest way to answer one question that bounces and silent drops hinge on: if I send mail to this domain, is there a live server on the other end ready to accept it? That is the exact SMTP step our verification engine runs after it resolves the MX records.
When one mail server delivers to another, they hold a short conversation in the Simple Mail Transfer Protocol. The sender connects, the receiver answers with a 220 greeting, the sender says EHLO, and they negotiate encryption and the envelope (MAIL FROM and RCPT TO) before any message body is sent.
An SMTP test exercises the front of that exchange. A healthy server answers the connection and greeting promptly; one that times out, refuses, or returns an error never gets to accept your mail. That handshake is also where mailbox-level verification begins, which is why the test doubles as a deliverability check.
The simplest way is to paste the domain into the SMTP test above and read the result. No account, no install. Verifox runs a live lookup of the mail server behind the domain and shows the host that would answer the SMTP connection.
You can also test from a terminal with openssl s_client -connect mail.example.com:25 -starttls smtp or an old-school telnet mail.example.com 25, but those make you read raw protocol replies yourself. The Verifox test names the mail provider in plain English and flows straight into a real mailbox verification when you need to go past the handshake.
Three things. First, whether mail is accepted at all, a live server that answers the handshake can receive email; a dead one means every message bounces. Second, which server and provider handle the mail, whether the domain runs on Google Workspace, Microsoft 365, or a self-hosted server; the mail domain lookup goes deeper on ownership. Third, a baseline deliverability signal.
What it cannot prove by itself is that one specific address exists, because many servers accept every recipient at the handshake and reject unknown mailboxes only later. To confirm a single address is reachable, the mailbox itself has to be checked, the step the test alone cannot finish.
Server-to-server mail delivery uses port 25, which is the port an SMTP test for inbound mail cares about, it is where another mail server connects to hand off a message. Submission from a mail client uses port 587 (with STARTTLS) or the older port 465 (implicit TLS).
The test above cares about the delivery path, the same path real mail takes to the domain’s receiving server. If you are configuring a mail client and need the submission host and port, the mail client server settings lookup pulls the documented IMAP, POP, and SMTP settings, and the MX lookup identifies the provider behind the domain.
A failed SMTP test usually means one of a few things: the domain publishes no mail server (no MX record), so nothing is listening; the server is down or refusing connections; a firewall is blocking port 25; or the domain does not resolve (a typo, expired registration, or DNS misconfiguration). In every case, mail to that domain bounces or stalls.
If you are chasing bounces, an SMTP test is the first place to look. Then a mail exchanger lookup confirms the routing, checking SPF, DKIM, and DMARC covers the authentication side that decides inbox versus spam, and a full email deliverability test rolls every signal into one report.
Yes. The single test above is free with no account. For a list of domains, the REST API resolves the mail server and reports the SMTP response for each one, so you can run a bulk SMTP test across a whole list programmatically and feed the results into your CRM or onboarding flow.
Bulk checks run on the same pay-as-you-go credits as the rest of the platform, localized to your region, and those credits never expire. One credit covers a single domain check.
No, and the difference matters. An SMTP test on the server checks the domain’s mail server, is it alive and accepting connections. Verifying an email checks the specific mailbox, does [email protected] actually exist and accept mail.
A domain can have a perfectly healthy SMTP server while a given address on it is dead, and some servers accept every recipient at the handshake and bounce unknown ones only afterward. That is why an SMTP test is step one of deliverability and the free email checker is step two. Verifox runs both on the same engine.
No. The domain you enter is resolved in memory and discarded the moment the test completes. Nothing logged, nothing retained, nothing sold. A mail server’s response is public, queryable data, but your tests are still yours.
Verifox is SOC 2 Type II compliant and GDPR ready. The full breakdown of what we touch and what we do not is in the privacy policy.
Yes. The REST API reference documents an endpoint that resolves a domain’s mail server and returns its SMTP response, so you can wire mail-server checks into your CRM, your signup flow, or any tool that speaks REST.
Verifox also ships native MCP server support, so AI agents (Claude, Cursor, custom LLM apps) can test a domain’s SMTP server and verify addresses without glue code. Live uptime and incident history are at status.verifox.ai.