Terms of Service
MXValidation helps you understand a real email’s configuration and content. Here’s how to use the findings responsibly.
Using the service
Submit only messages you own or are authorized to test. Each valid test address accepts one analysis. Later messages do not replace the original or restart the analysis. Do not use the service to send unwanted mail, overload the infrastructure, or submit unlawful content.
Report viewing allowances
Guests can unlock up to 3 distinct tests per rolling 24 hours per visitor IP, and 3 per tested From domain. Shared public mailbox domains such as gmail.com and outlook.com are excluded from the domain allowance. A protected session preserves access to an already admitted guest report. New visitors holding a shared link are checked separately. IPs behind NAT share an allowance; IPv6 is grouped by /64. A verified free account allows 20 new reports per rolling 24 hours; accounts specifically granted an unlimited allowance have no report quota. Request rate limits still apply. These rules do not stop SMTP receiving or analysis. A From domain can be spoofed and is not proof of domain ownership.
Understanding the results
The findings describe a single delivery to our analysis server. They do not guarantee inbox placement, future reputation, or acceptance by any particular mailbox provider. Authentication can pass while an email is still filtered for other reasons. Unavailable checks are marked Unknown and are never silently treated as passing.
How the 0–10 score works
The score is the sum of fixed check weights multiplied by the evidence factor. The default factors are Passed = 1, Warning = 0.5, Failed = 0, Unknown = 0, Pending = 0; the exceptions below use the underlying evidence. Missing checks stay in the denominator: they cannot inflate the score.
| Check | Maximum points |
|---|---|
| SpamAssassin score | 2.0 |
| SPF authentication | 1.5 |
| DKIM authentication | 1.5 |
| DMARC policy & alignment | 1.5 |
| Sender IP reputation | 1.0 |
| Reverse DNS & EHLO/HELO | 0.5 |
| Email headers | 0.5 |
| HTML & MIME structure | 0.5 |
| Links | 0.5 |
| SMTP TLS | 0.5 |
SpamAssassin uses a continuous evidence factor: clamp(1 − adjusted_spam_score / 5, 0, 1). The adjusted score subtracts positive contributions from EMPTY_MESSAGE and MISSING_SUBJECT because empty content and missing subjects are allowed for test emails. Positive contributions from DMARC_PASS, DMARC_NONE, DMARC_QUAR, DMARC_REJECT and DMARC_MISSING are also excluded: DMARC is scored only in its dedicated check. These rules and the original SpamAssassin score remain visible, but do not reduce the MXValidation score or appear as repair priorities. A score of zero or below earns its full 2 points; a score of 5 or above earns zero. Values in between earn proportionate points. The original SpamAssassin score and the website’s 0–10 diagnostic score are separate measurements. Lower SpamAssassin scores are better; higher diagnostic scores indicate more passing evidence.
SPF softfail, neutral, and none are warnings; fail and permerror fail. Missing DKIM is a warning. DMARC authentication and domain policy are separate: a DMARC Pass earns all 1.5 points with none, quarantine or reject. Pass with p=none displays Warning: Monitoring only in the detailed analysis and is excluded from repair priorities. Missing rua is informational and never deducts points or creates a repair priority. A confirmed DMARC Fail or invalid record earns zero DMARC points and may appear in repair priorities. Missing records, insufficient evidence and DNS errors produce Unknown authentication, not a confirmed Fail. DNSBL earns full points only when every configured list returns a confirmed clear result; disabled, access-denied, DNS errors, and unknown responses earn zero. Failed reverse DNS fails. Header issues warn. Active HTML and risky attachment extensions fail MIME; other MIME issues warn. URL mismatches fail; invalid, unresolved or truncated links warn; DNS errors are unknown. TLS not used warns. Analyzer errors and timeouts are unknown.
A provisional score is shown only after at least one check provides assessable evidence. A completed test with no conclusive results has no numeric score. Coverage is always displayed alongside the score. For example, a disabled DNSBL check cannot earn its 1 point, even if every other check passes.
Availability and retention
Analysis availability depends on DNS, local analyzers and database connectivity. Results may be delayed or incomplete. Timestamped addresses accept new mail for 24 hours; anonymous reports remain available for 14 days after receipt. Account-owned results remain until explicitly deleted. Original SMTP files have a separate retention schedule. The service may enforce connection and request limits to maintain availability.
Essential technical limitations
This is a diagnostic service, not an antivirus, a mailbox provider, or a certification of domain safety. We do not visit extracted URLs. A TLS result describes the observed SMTP session only. Reputation findings cover only the configured lists with permitted usage terms.
Last updated: 11 Oct 2026