What gets checked
Syntax validation
RFC-aligned format checking — instant, no network call.
Domain & MX resolution
Confirms the domain exists and has mail servers configured to receive mail.
SPF & DMARC detection
Checks whether the domain publishes the DNS records of an actively maintained mail setup.
Disposable & free-provider detection
Two independent, maintained lookups — never conflated with each other.
Typo detection
Flags likely misspellings of popular providers (gmial.com → gmail.com) with a suggested correction.
Live SMTP verification (optional)
A real RCPT TO handshake against the mail server, with catch-all detection, in opt-in full mode.
Example request
curl https://api.emailriskradar.com/v1/email/check \
-H "Authorization: Bearer $API_KEY" \
-H "Content-Type: application/json" \
-d '{"email": "user@example.com", "mode": "full"}'FAQ
No. SMTP verification (full mode) stops after the mail server responds to RCPT TO — no DATA command is sent, so no message is ever delivered.
Fast only reads cached DNS data for lowest latency. Standard performs live DNS/MX/SPF/DMARC lookups. Full adds a live SMTP handshake for the strongest deliverability signal.
Yes — POST a batch to the bulk endpoint and either poll for job status or receive a webhook when it completes.
No — verification confirms reachability, not intent. Pair it with the Email Risk API for a trust/fraud signal on top of deliverability.