Email address risk check
Type an email address to get a score from 0 to 100 and see each check behind it. The checks read the domain’s age and mail records and whether it is a disposable or free inbox.
Result jana.novak@example.com
The checks found strong reasons to look again, such as a domain that takes no mail, a disposable inbox or a recently registered domain. Get more information before the decision goes ahead.
| Check | Finding | Points |
|---|---|---|
| Mail records | The domain publishes a record saying it takes no mail. | +60 |
| Disposable | The domain is not on the list of disposable inboxes. | 0 |
| Domain age | The domain was registered on August 14, 1995, 31 years ago. | 0 |
| Free provider | The domain is not a free mailbox provider, so it belongs to an organisation or a person. | 0 |
| Shared mailbox | The name before the @ is not a shared mailbox. | 0 |
| SPF | The domain publishes an SPF record. | 0 |
| DMARC | The domain publishes a DMARC record with the policy reject. | 0 |
| Digits | The name before the @ is not mostly digits. | 0 |
Domain records
| Domain | – |
|---|---|
| Registered | – |
| Expires | – |
| Registrar | – |
| Mail servers | – |
| SPF | – |
| DMARC | – |
How the score is built
Each check that finds something adds its points to the score. The score stops at 100, with under 25 classed as low, 25 to 59 as medium, and 60 and over as high.
The check reads the domain’s DNS records and registration data when you press the button, then compares the domain with open lists of disposable and free inboxes. It does not connect to the mail server or send anything, so it cannot tell whether the mailbox exists.
| Check | Points added |
|---|---|
| Mail records | 15–70 |
| Disposable | 70 |
| Possible typo | 40 |
| Domain age | 15–40 |
| Domain status | 30 |
| Shared mailbox | 15 |
| SPF | 10 |
| Digits | 10 |
| Free provider | 5 |
| DMARC | 5 |
| Plus tag | 0 |
Where data comes from
The records come from DNS and RDAP, the registration data registries publish and the successor to WHOIS. Volunteers maintain the open lists of disposable and free inbox domains, and new throwaway domains appear every day, so no list is complete. Several country registries publish no RDAP, so the age is unknown for those domains.
Lists used: disposable-email-domains (CC0 1.0), free-email-domains by Kiko Beats (MIT).
The same checks can inform rules for a sign-up, application or payment decision alongside the device and IP address when the decision is made. Start free
What an email risk score shows
An email risk score adds points when checks find something about the domain or address. The checks cover mail records, domain age, disposable and free inbox lists, and details such as a shared mailbox or digits in the name.
For a lender, the score is one reason to review an address during sign-up, an application or an order. Read it alongside the device, IP address and rest of the application, then decide whether more information is needed.
Email risk questions
How do I check if an email address is risky?
This check adds points when it finds something about the address or domain. Read the score with the rest of the application.
What does an email risk score mean?
It is the sum of the points from checks that found something, up to a score of 100. Under 25 is low, 25 to 59 is medium, and 60 and over is high.
How can I tell if an email is disposable?
The check compares the domain with an open list of disposable inbox domains. New throwaway domains appear every day, so no list is complete.
How do I check the age of an email domain?
The check reads registration data from RDAP to find when the domain was registered. Some registries publish no RDAP or registration date, so the age may be unknown.
Does an email check show whether a mailbox exists?
This check does not connect to the mail server or send anything. It cannot tell whether the mailbox itself exists.