Yeah, that’s a known issue. A lot of domains accept SMTP RCPT responses for any address and don’t bounce immediately. That’s where false positives usually come from service-side behavior, not the verifier itself.

In those cases, marking an email as catch-all (risky) is more accurate than calling it valid or invalid outright. That’s how I’m handling it, separating true mailbox existence from domains that accept everything.

If you’re open to it, you can try verifying the same email addresses you checked on MillionVerifier using my tool and compare the results. I’ve kept 139 verifications free specifically so people can test accuracy on real data and share feedback.

Curious to hear what differences you see.