
Other verifiers shrug at catch-all domains and call them “unknown.” CatchLume stacks five signals into a real 0–100 confidence score — so you stop wasting deliverability on 30% of your list.
Live · Powered by the CatchLume engine · Free during beta · 5/day per IP
The unknown problem
Catch-all mail servers accept anything at the SMTP layer, so legacy verifiers can't tell a real mailbox from a black hole. They mark the whole bucket “unknown” and bill you for the privilege.
That bucket is 25–35% of B2B addresses. CatchLume cracks it open with a stacked engine that scores what others skip.
jane.doe@catch-all-corp.com
Three surfaces, one engine
POST a single email, get a verdict + 0–100 score in <300ms. vk_* keys, salted SHA-256 at rest, 300/min per user.
POST /v1/verify
Authorization: Bearer vk_…
{ "email": "jane@acme.io" }Upload up to 100k rows / 10 MB. Job streams through Redis to workers and lands in a downloadable export.
POST /v1/verify/bulk
Content-Type: multipart/form-data
file=list.csv → job_idDrop a 4 KB script on your signup form. Sub-200ms verdict, native setCustomValidity, origin-scoped widget keys.
<script src="https://catchlume.shakvaro.com/widget.js"></script>
window.CatchLume.attach('#email', { key: 'vk_…' })Under the hood
Each layer is cheap and falsifiable on its own. Together they triangulate something legacy verifiers can't: whether a real human lives behind a catch-all.
RFC-grade syntax, disposable list, MX / SPF / DMARC lookup. The cheap gates first.
RCPT-TO timing variance vs. a known-bad probe. Real mailboxes respond differently than catch-all sinkholes.
MD5 over the address. A hit is a strong positive signal a human owns the inbox.
Banner, response codes, greylisting behavior. Google / Microsoft / Zoho all leak signature.
scikit-learn gradient-boosted classifier blends every signal into one 0–100 confidence score. sha256-checked at load.
One calibrated output
87
example output
Pricing
Start free with 250 verifications a month, then step up as your list grows. Free during beta, no card, and every plan lands well under ZeroBounce or NeverBounce when billing opens.
Free
250 verifications / month
$0/mo
Starter
2,500 / month · 3 API keys
$9/mo
GrowthPopular
10,000 / month · webhooks
$29/mo
Scale
40,000 / month · HubSpot
$79/mo
Plus pay-as-you-go credit packs that never expire. Compare all plans
Built like infra
Never plaintext. Per-user salt, modern KDF.
vk_* values hashed at rest. Lost key = rotate, no reveal.
RFC1918 / loopback / link-local rejected before any connect.
Reuse-detection invalidates the family. Stolen cookie ≠ forever.
Questions
Most verifiers return 'unknown' or 'risky' for catch-all domains, which is roughly 30% of B2B addresses. CatchLume stacks five signals, DNS, SMTP timing, Gravatar, provider fingerprint, and an ML scorer, to produce a real 0–100 confidence instead of a shrug. That's the whole bet.
It calls the same engine that powers the API, gated through a server-side proxy on shakvaro.com, no Turnstile prompt for you, no credit cost, and the result is trimmed to verdict + score + disposable + typo. Bulk and full-fidelity results live behind sign-in.
Yes. Guest try-it is 5/day per IP. Signed-in accounts get 500 verifications per month. Stripe is wired in code but dormant, no card asked, no surprise charges. Pricing lands at roughly 40% under ZeroBounce / NeverBounce when we flip the switch.
Postgres + Redis on a VPS we run ourselves, Docker non-root containers, bound to localhost behind nginx + Let's Encrypt. HubSpot OAuth tokens are Fernet-encrypted at rest. We don't sell verification data and we don't share email lists between accounts.
This landing page is part of the agency site. The widget on the marketing home proves the engine works without making you create an account first. The full product surface, bulk CSV, API keys, HubSpot, billing, lives at catchlume.shakvaro.com.
Not yet. The current model is trained on synthetic catch-all traffic only. Once we have enough opted-in labeled traffic, we'll retrain, and it will be opt-in with a clear toggle, not a default.

Free during beta · No card asked
Sign in at catchlume.shakvaro.com and start scoring catch-all domains the same minute.