News for hackers. Stuff that matters.
Re:Email.ml – Minimalist Temporary Email by jasode on Saturday May 25, 2024 @04:19AM (#40473487)
>I never ran into that problem with https://temp-mail.org. They cycle domains constantly.

You didn't run into that problem with temp-mail.org because you happen to use them on websites that don't bother blocking disposable email addresses -- or -- they do try to block them but use simplistic domain name checks.

But cycling domain names isn't enough to fool the more sophisticated disposable/throwaway email address detectors (especially the paid services) because they use extra heuristics of checking DNS MX records ip addresses.

E.g. temp-mail.org assigned the following random addresses "[email protected]" and "[email protected]". Both of those domains are easily detected as throwaway emails because they both share the same MX ip 24.199.65.21 :

- https://verifymail.io/domain/mcatag.com

- https://verifymail.io/domain/javnoi.com

On the other hand, the "@mcatag.com", "@javnoi.com", etc used by temp-mail.org is good enough to get past the websites that copy&paste the code from these StackOverflow answers that just use simplistic string matching : https://stackoverflow.com/questions/10976706/how-to-block-di...

It all depends on how much effort and cost the websites want to put into blocking disposable email addresses.

Re:Email.ml – Minimalist Temporary Email by ccbikai on Saturday May 25, 2024 @06:43AM (#40474115)
If they use Cloudflare's Email Routing, the MX IP is more difficult to detect