Deliverable or undeliverable, not risky

Catch-All Email Verification

Most validators mark catch-all emails risky and leave you to guess. OrbiSearch confirms whether the mailbox exists without sending an email, and tells you deliverable or undeliverable. Including behind secure email gateways and on greylisted servers.

100 free credits on sign-up, enough for 500 validations. 0.2 credits per email, catch-alls included.

Updated

The OrbiSearch web app: a validated list with each email marked safe or invalid, including catch-all domains

What is catch-all email verification?

Catch-all email verification checks whether a specific mailbox exists on a domain that accepts mail for any address. A standard check can't tell, because a catch-all server says yes to every address, real or not. OrbiSearch confirms the mailbox without sending an email and returns deliverable or undeliverable instead of risky.

Catch-alls are a big share of every B2B list, and most of them can be verified.

31.4%

of business email domains are catch-all

~86%

of catch-all domains can potentially be verified

~1 in 7

are self-hosted and unverifiable by any tool without sending

From our analysis of 1.6 million business domains and 23M+ verifications. Read the catch-all domains research

Why do most validators mark catch-all emails as risky?

Most validators hand catch-alls back as risky or unknown. You either drop the contact or send blind and take the bounces. Some send real emails to your prospects and make you wait days for the result.

OrbiSearch tells you which catch-all emails are deliverable and which aren't, in seconds, in the same check as the rest of your list. One tool and one price for every B2B email, catch-all or not.

See how we compare with BounceBan, ZeroBounce and MillionVerifier.

EmailOther validatorsOrbiSearch
[email protected]Catch-allriskydeliverable
[email protected]Catch-allunknowndeliverable
[email protected]Catch-allriskyundeliverable
[email protected]deliverabledeliverable
[email protected]Catch-allriskydeliverable
One tool, one flat price per email

How does catch-all email verification work?

Every email gets the standard mailbox checks first. When the domain turns out to be catch-all, our catch-all verification layer confirms whether that specific mailbox exists. No email is sent at any point.

1Your email

Catch-all domain

2Layer 1: SMTP

Mail server found

Address accepted

Catch-all: on to layer 2

3Layer 2: Catch-all resolution

Mailbox confirmed

No email sent

4Verdict
Deliverable

Safe to send

Automatic. Runs on every validation, in the web app and the API. Nothing to switch on.

Fast. Seconds per email, and 10,000 emails in under 10 minutes.

Conservative. We mark an email safe only on a conclusive signal, for the lowest false positive rate among catch-all validators.

The emails other validators give up on

Catch-alls rarely come alone. Gateways and greylisting hide the mailbox too, and we validate behind all three.

Accepts any address

[email protected]

Most validators

unknown

OrbiSearch

deliverable

Catch-all domains

The server accepts mail for any address, so a standard check can't tell whether a specific mailbox exists. OrbiSearch confirms whether it does, in seconds, and returns deliverable or undeliverable without sending an email.

Behind Mimecast

[email protected]

Most validators

unknown

OrbiSearch

deliverable

Secure email gateways

Gateways like Mimecast, Proofpoint and Barracuda answer verification checks themselves, so the domain looks catch-all whatever sits behind it. 99.9% of domains behind a Barracuda gateway are catch-all. OrbiSearch still confirms whether the mailbox behind the gateway exists.

451: try again later

[email protected]

Most validators

unknown

OrbiSearch

undeliverable

Greylisted servers

Greylisting servers turn away the first check and expect a retry later, and some domains combine greylisting with catch-all. Most validators give up on the first rejection. OrbiSearch handles the retry and returns a verdict instead of an unknown.

Can every catch-all email be verified?

No tool can verify every catch-all. About 1 in 7 catch-all domains are self-hosted, and for those the only way to confirm a mailbox is to send a message and watch for a bounce. A tool claiming to verify them all is guessing.

When we can't confirm a mailbox, we mark it Risky instead of guessing. That's what keeps a Safe result meaning safe.

Safe

We confirmed the mailbox exists. Send to it.

Invalid

We confirmed the mailbox doesn't exist. Remove it.

Risky

A catch-all where nobody can confirm the mailbox without sending. We tell you, rather than guess.

Every status and reason is explained in verification statuses.

How much does catch-all email verification cost?

Catch-all verification isn't an add-on. Every email costs the same 0.2 credits, catch-all or not, with no second tool and no separate catch-all credit.

0.2

Credits per email, catch-alls included

$0.20

Per 1,000 validations on our largest packs

Credits never expire and work on every product

More reachable contacts from the same list

The catch-alls other validators discard are prospects you can still reach.

GTM and lead-gen agencies

Catch-all contacts other tools tell your clients to drop are often the best accounts on the list. Verify them, send to the deliverable ones and keep bounce rates low on every client's campaign.

OrbiSearch for GTM engineers and agencies

Outbound and SDR teams

Everyone runs the same lists. When your validator resolves the catch-alls your competitors discard, those prospects hear only from you. Upload a CSV and get results back in minutes.

Try the free bulk validator

Data and enrichment platforms

Every catch-all contact you can mark deliverable is one more record you can stand behind and sell. Verify over the API at volume, with one price per email whatever the domain.

OrbiSearch for data platforms

Finding emails too? Every email our email finder returns is already verified, including on catch-all domains, so there's nothing to revalidate.

Frequently Asked Questions

What is a catch-all email?

A catch-all email is an address on a catch-all domain (also called accept-all or wildcard): one whose mail server accepts messages to any address, including ones that don't exist. If acme.com is catch-all, both [email protected] and [email protected] are accepted, so the server's answer alone can't tell you whether a specific mailbox is real. Across 1.6 million business domains in our research, 31.4% were catch-all.

Why do most validators mark catch-all emails as risky?

Because a standard check stops at the mail server, and a catch-all server says yes to everything. Most validators return risky, accept-all or unknown and leave the decision to you. That usually means discarding the contact, or sending blind and taking the bounces.

How does OrbiSearch verify catch-all emails?

Every email goes through standard mailbox checks first. When the domain turns out to be catch-all, our catch-all verification layer confirms whether that specific mailbox exists, and returns deliverable or undeliverable. We don't publish the details of how it works, but we never send an email to your contacts to find out.

Do you send emails to my contacts?

No. OrbiSearch confirms the mailbox without sending an email, so your contacts never receive a test message and you never wait days for bounces. Results come back in seconds for a single email, and 10,000 emails take under 10 minutes.

Can you verify every catch-all email?

No, and no one can. In our research, about 1 in 7 catch-all domains are self-hosted, and for those the only way to confirm a mailbox is to send a message and watch for a bounce. When we can't confirm a mailbox, we mark it Risky rather than guess, so a Safe result keeps meaning safe. Around 86% of catch-all domains sit on infrastructure that can potentially be verified.

Does catch-all email verification cost extra?

No. Catch-all verification is part of every validation, at 0.2 credits per email whatever the domain. There is no separate catch-all credit, add-on or second tool. Credits never expire, and the per-credit price drops as packs get larger, down to $0.20 per 1,000 validations.

What results will I get back?

Every email gets one of four statuses. Safe means the mailbox exists. Invalid means it doesn't. Risky means it's on a catch-all domain where we couldn't confirm the mailbox either way. Unknown means the recipient's server had a temporary problem, and it usually resolves on retry. Each status comes with a more specific reason, explained in verification statuses.

Does it work behind secure email gateways and on greylisted servers?

Yes. A domain behind a secure email gateway such as Mimecast, Proofpoint or Barracuda almost always looks catch-all, because the gateway answers the check itself. We still confirm whether the mailbox behind the gateway exists. Greylisted servers that turn away the first check get a proper retry, so you get a verdict instead of an unknown.

Do I need to validate emails I find with OrbiSearch?

No. Every email the OrbiSearch email finder returns has already been verified, including on catch-all domains, so you can send to it straight away.

Can I use it over the API?

Yes. Verify one email at a time or send bulk jobs over the API, or upload a CSV in the web app. Catch-all verification runs on every request, with nothing to switch on.

See what your catch-alls really are

Run a list you've already validated elsewhere and compare the results. 100 free credits on sign-up, no card required.