From zero emails to verified inboxes
Three interconnected systems work together: a 4-layer discovery pipeline finds published emails, an 8-pattern prediction engine generates likely addresses, and an 8-check verification pipeline scores every email 0-100.
DNS records, DMARC policies, Wayback Machine archives. Zero requests to the target domain.
Crawl contact, about, team, and privacy pages. Extract emails from HTML, mailto links, and structured data.
SearXNG, Bing, Brave, and DuckDuckGo. Search for published email addresses associated with the domain.
Last resort. Browser-automated Google search for email addresses when passive and direct methods fail.
| Check | Description | Weight |
|---|---|---|
| Syntax Validation | RFC 5322 compliance check | +5 |
| DNS/MX Lookup | Verify domain has mail exchange records | +20 |
| SMTP Handshake | Connect to mail server, verify mailbox exists | +40 |
| Catch-All Detection | Identify domains that accept all addresses | +5 |
| Disposable Domain | Flag temporary/throwaway email services | +5 |
| Role-Based Filter | Detect info@, admin@, support@ addresses | +5 |
| DKIM/SPF/DMARC | Verify authentication records exist | +15 |
| Reacher Fallback | Secondary verification via self-hosted Reacher | +10 |
Safe to send. Verified mailbox, valid domain, strong authentication.
Likely valid. Partial verification. May be catch-all domain.
Needs review. Inconclusive verification or weak signals.
Do not send. Invalid, disposable, or bouncing address.
Everything you need to know about our platform.
Still have questions?
Our team can walk you through the pipeline, pricing, and your use case.