Comprehensive Guide to Email Verification, List Hygiene & Sender Reputation
Maintaining a clean subscriber list is the single most important factor determining whether your outreach, marketing newsletters, and transactional messages land in recipient inboxes or spam folders. As mailbox providers like Google Workspace and Microsoft 365 continuously tighten deliverability standards, sending email to invalid addresses, unmonitored role accounts, or disposable domains rapidly degrades sender reputation. This guide details exactly what in-browser list hygiene checks achieve, how DNS mail routing operates, and the critical distinction between DNS-level validation and intrusive SMTP probing.
What This Tool Checks vs. What It Does NOT Check
Honesty and technical precision are paramount in email hygiene. Many commercial services overpromise by claiming 100% "deliverability guarantees." In reality, email delivery is governed by a chain of independent protocols. Below is a clear technical breakdown of the boundaries of in-browser list hygiene:
| Technical Factor | Verified By This Tool? | Underlying Mechanism |
|---|---|---|
| RFC 5322 Syntax & Length Limits | Yes (100% Local) | Strict token parser verifying local-part (≤64), domain (≤253), label (≤63), and dot placement. |
| Authoritative MX Records | Yes (via DoH) | Queries public DNS resolvers for Type 15 (MX) resource records and priority rankings. |
| RFC 7505 Null-MX Rejection | Yes (Instant Detection) | Detects priority 0 host '.' records designating domains that intentionally reject all mail. |
| RFC 5321 Implicit MX Fallback | Yes (Flagged Risky) | Queries address records (A/AAAA) when no explicit MX record is published. |
| Disposable Burner Domains | Yes (9,800+ Domains) | Open-source curated blocklist of temporary email services (Mailinator, GuerrillaMail, etc.). |
| Role-Based Account Detection | Yes (RFC 2142) | Matches functional local-parts (sales, billing, admin, support, info, etc.). |
| Individual Mailbox Existence | No (SMTP Required) | Requires establishing an active TCP port 25 connection and transmitting RCPT TO. |
| Catch-All Domain Behavior | No (SMTP Required) | Requires probing with a randomized nonexistent address to observe server response. |
| Inbox Full / Storage Quotas | No (SMTP Required) | Reported only during active message transmission via SMTP 452 or 552 reply codes. |
Understanding the 9 Standardized Verification Statuses
Rather than using ambiguous marketing terms like "Deliverable" or "Undeliverable", AshToolbox categorizes every address into one of nine technically precise statuses:
- Invalid syntax: The address violates basic RFC 5321 or RFC 5322 formatting rules, such as missing an @ symbol, consecutive unquoted dots, leading or trailing dots, or exceeding length limits.
- Domain does not exist (NXDOMAIN): DNS queries returned an authoritative RCODE 3 (Non-Existent Domain), proving the domain is not registered in the root zone.
- Domain does not accept mail (Null MX, RFC 7505): The domain publishes an RFC 7505 Null-MX record (priority 0 host '.'). Mail sent to this domain will fail immediately with permanent error code 556 5.1.10.
- Domain accepts mail (MX present): Authoritative Type 15 (MX) mail exchange records are published and reachable in public DNS.
- Domain may accept mail (implicit MX per RFC 5321): The domain does not publish an MX record, but an address (A/AAAA) record exists. Under RFC 5321 §5.1, mail servers may attempt delivery directly to the web host IP, but delivery is unconfirmed and risky.
- Disposable address: The domain matches our database of over 9,800 temporary burner mailbox providers. These addresses are typically abandoned within minutes.
- Role-based address: The mailbox local-part (e.g.,
admin@,support@,info@) represents a functional department rather than an individual person, carrying lower engagement and higher spam reporting risks. - Possible typo: The domain exhibits a likely typo or keyboard slip of a popular webmail provider (e.g.,
gmial.comor.con), accompanied by a suggested correction. - Unknown (timeout / unconfirmed): The DNS query could not be completed due to resolver timeout, SERVFAIL, or rate limiting. These addresses are never classified as valid or invalid.
DNS-Level vs. SMTP-Level Verification Explained
Understanding why in-browser tools operate at the DNS level is vital. Connecting directly to recipient mail servers over SMTP port 25 to send RCPT TO commands is intrusive. Modern anti-abuse systems, including Spamhaus and Microsoft Exchange Online Protection (EOP), actively monitor connection patterns. Scripted bulk SMTP probing frequently triggers IP blacklisting, greylisting delays, and false positives caused by catch-all mail servers that accept all recipients before quietly discarding them later.
In contrast, DNS-over-HTTPS (DoH) hygiene checking verifies the structural foundation of email routing—syntax, root domain existence, authoritative MX prioritization, and domain reputation—without generating suspicious traffic or invading recipient privacy.
The Hygiene Score Formula & Deduction Weights
AshToolbox provides a transparent, deterministic Hygiene Score from 0 to 100 for every audited address. Unlike black-box commercial ratings, our formula is completely open:
- Base Score: 100 points for a syntactically valid address with active MX servers.
- Definitive Failure Deductions: Invalid Syntax (-100 pts), NXDOMAIN (-100 pts), or RFC 7505 Null-MX (-100 pts) immediately drop the score to 0 (Grade F).
- Risk Deductions: Disposable burner domain (-60 pts), RFC 5321 Implicit MX (-35 pts), Suspected domain typo (-25 pts), Role-based department account (-15 pts), Consumer webmail vs corporate host (-5 pts).
- Unconfirmed Resolver Timeout: Reduces score by -50 points (Grade C) to clearly reflect uncertainty.
Google & Yahoo Bulk-Sender Requirements (February 2024 Standards)
In February 2024, Google and Yahoo jointly implemented mandatory technical requirements for senders dispatching more than 5,000 emails per day to Gmail or Yahoo Mail recipients. Senders who fail to comply experience immediate delivery delays, spam folder routing, or permanent SMTP rejection (550 errors). The core requirements include:
- Strict Sender Authentication: Both SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) must be published and aligned with the sending domain.
- DMARC Alignment: Senders must publish a valid DMARC policy record (
p=none,p=quarantine, orp=reject). - Spam Complaint Thresholds: Senders must maintain a reported spam rate below 0.10% in Google Postmaster Tools, and must never exceed a 0.30% spam complaint rate.
- 1-Click List-Unsubscribe: All promotional and marketing emails must support RFC 8058 one-click unsubscribe headers.
- Valid Forward and Reverse DNS (rDNS): Sending IP addresses must have matching PTR records.
A high bounce rate is the primary precursor to exceeding these spam thresholds. Removing addresses flagged by AshToolbox as Null-MX, NXDOMAIN, or invalid syntax prior to transmission is the first line of defense in maintaining sender compliance.
Related Guides & Deep-Dive Technical Tutorials
Frequently Asked Questions
Does this tool verify if an individual mailbox actually exists?
No. This tool performs DNS-level and rule-based list hygiene checks (RFC 5322 syntax, DNS MX records, Null MX, disposable domains, and role prefixes). It does not connect to mail servers over SMTP, so it cannot verify whether an individual mailbox exists, catch-all domains, full inboxes, or greylisting.
What is an RFC 7505 Null-MX record?
RFC 7505 defines a Null-MX resource record (priority 0 pointing to host '.') used by domains that do not accept email. Sending email to a Null-MX domain causes sending servers to immediately reject the message with permanent error code 556 5.1.10.
What is an Implicit MX record per RFC 5321?
RFC 5321 Section 5.1 permits a mail server to attempt delivery directly to a domain's address (A or AAAA) record if no MX records exist. This legacy fallback is considered risky because modern web servers frequently do not run mail services.
Is my email list uploaded to your servers?
No. Your list is parsed and processed 100% inside your browser session using Web Workers. For DNS checks, only the domain name portion of each address (not individual names or full addresses) is sent to public DNS-over-HTTPS resolvers over encrypted HTTPS. You can also enable 'Local-Only Mode' to run checks with zero network requests.
Which DNS resolvers are queried for MX records?
Our engine queries Google Public DNS (dns.google), Cloudflare DNS (cloudflare-dns.com), or Alibaba DNS (dns.alidns.com) via DNS-over-HTTPS (DoH). Only domain names are queried, and results are cached in browser memory to minimize requests.
What is the Hygiene Score and how is it calculated?
The Hygiene Score is an informational quality metric from 0 to 100 based on syntax validity, DNS MX status, disposable domain checks, role prefixes, and typo risks. It is not a delivery probability. The score starts at 100 and applies transparent deductions for identified risk factors.
How does the Typo Suggestions feature work?
Typo suggestions use Damerau-Levenshtein edit-distance algorithms and common TLD transposition mappings (e.g., .con to .com, gmial.com to gmail.com) against major webmail providers to flag accidental misspellings with a candidate correction.
What are Google and Yahoo bulk-sender requirements?
Starting February 2024, Google and Yahoo enforce strict sender guidelines requiring bulk senders (over 5,000 messages daily) to authenticate outgoing mail with SPF, DKIM, and DMARC, provide a 1-click unsubscribe header, and maintain spam complaint rates below 0.10% (never exceeding 0.30%).