Fraudulent email domain tracker: June 2025
This is the third edition of our monthly tracker highlighting email domains linked to fraudulent activity. Just like in Mays’s report, our goal is to equip security and anti-fraud teams with greater visibility into the email infrastructure commonly exploited by bots and fraudsters.
What this list includes: The domains featured here are those observed in connection with fake account creation and other abuse patterns. These fall into three primary categories:
- Known disposable email services
- Custom “throwaway” domains registered specifically for fraud
- Legitimate free email providers with limited anti-abuse protections
Why we’re publishing this
Most open-source intelligence on email abuse focuses only on known disposable inbox providers. These lists are often compiled by scraping public sites that promote temporary email services. But this approach overlooks large swaths of abuse.
Because Castle protects real-world websites and apps at scale, we see a much broader picture, including custom throwaway domains attackers register for specific campaigns. These domains rarely appear on public blocklists and are often used for short bursts of activity before being discarded.
By sharing the domains we’ve observed, we aim to help fraud teams expand their visibility into attacker infrastructure and detect threats earlier.
How to use this list
This dataset is a signal, not a blocklist. We don’t recommend banning these domains outright. Instead, use them to inform risk scoring and layered defenses. For instance:
- Reduce thresholds for identity or behavioral verification
- Combine with device fingerprinting or traffic patterns to increase confidence
- Monitor for spikes in use of newly registered or low-reputation domains
The list below includes 271 domains, sorted by volume of malicious activity observed, highest to lowest.
sute.jp
ereirqu.com
forexzig.com
forexnews.bg
wyoxafp.com
sumbeter.com
exdonuts.com
smykwb.com
asciibinder.net
netscape.net
mozej.com
jxpomup.com
zudpck.com
msitip.com
qzueos.com
mailshan.com
aminating.com
maildrop.cc
tiongle.com
volbalt.com
write7.com
xfavaj.com
sofaion.com
fxzig.com
bangban.uk
logsmarter.net
byom.de
moranfx.com
yanemail.com
mkzaso.com
zvvzuv.com
any.pink
illubd.com
cmhvzylmfc.com
vwhins.com
fxavaj.com
bltiwd.com
boxfi.uk
thetechnext.net
xkxkud.com
osxofulk.com
koluse.com
ibolinva.com
azuretechtalk.net
virtuxis.com
enotj.com
mrotzis.com
lafole.com
mailto.plus
dsitip.com
polkaroad.net
drmail.in
laogia.com
chefalicious.com
sharklasers.com
haren.uk
oemails.com
juno.com
nesopf.com
nespf.com
wywnxa.com
saproy.com
amail.com
kubva.com
qacmjeq.com
jkotypc.com
qnmails.com
telegmail.com
qejjyl.com
autlook.com
tuamaeaquelaursa.com
knmcadibav.com
nespj.com
fsitip.com
hi2.in
opsef.com
bigmir.net
uorak.com
mailinator.com
daouse.com
letterprotect.com
gotmail.com
htmail.com
icolud.com
gmail.net
hotmali.com
agmail.com
4gmail.com
5gmail.com
1gmail.com
icloid.com
firstmailler.com
gmain.com
gmail10p.com
outlook.ph
quieresmail.com
monotiger.cfd
gomail.com
gufum.com
outllok.com
betzenn.com
deformamail.ru
puedemail.com
igmail.com
hotmial.com
frisbook.com
claspira.com
eduhed.com
dlbazi.com
aceomail.com
toaik.com
pricegh.com
gmaik.com
corporate.vinnica.ua
ofular.com
atorymail.com
daxiake.com
privateemail.uz.ua
iclound.com
babupro.xyz
jeanssi.com
jioso.com
acedby.com
endelite.com
cigidea.com
leabro.com
gmaip.com
gmmail.com
outloo.com
besibali.com
jmail.com
bolivianomail.com
chiefmail.kr.ua
swilad.com
e-mail.com
123gmail.com
baxima.com
chromomail.com
streetwormail.com
nomrista.com
merepost.com
jojomail.today
designmask.xyz
tubermail.com
ronaldofmail.com
perc30s.org
bokomail.today
utiliseremail.com
deoxidizer.org
inbox.eu
123.com
wildbmail.com
eblanomail.com
jojomail.online
difficilemail.com
zprc.me
bokomail.live
xn--gmal-nza.com
demainmail.com
regardermail.com
gemil.com
24kf82.me
deha.life
44505563.54you.vip
fivemready.org
52you.vip
lorranboss.shop
dcpa.net
axibei.com
usersinbuckets.com
saytus.site
emaily.pro
jojomail.store
ryftgen.xyz
juicy.email
bilola.shop
yopmail.com
hepatomolml.ru
kidbeguinha.xyz
qinianstm.com
kolasmail.xyz
punkproof.com
fivemquality.online
01dasrock.shop
hotmaiill.cloud
hufmail.online
virgintommy.in
bokomail.fun
e-mail.lol
ignity.space
vieirabilson.cloud
averost.com
gamerspace.online
miakhalifa.cloud
message.rest
fivemhq.online
vkfivem.shop
blueink.top
letters.monster
pivete.shop
anymail.xyz
kakdela.net
phgm52.cn
edny.net
wirelicker.com
shroudedhills.com
whyusoserious.org
maiorfornecedor.com
trevorhost.in
franklinhost.in
lesterhost.in
michaehost.in
2mails1box.com
homingpigeon.org
xitarearte.shop
hfdafkfcdbu.shop
lostspaceship.net
emailclub.net
desumail.com
myhyperspace.org
rocketpost.org
signinid.com
energymail.org
300bucks.net
voltaex.fun
frcomunity.com
maxdrib.com
tigresatop.org
doxbin.bar
lolihentai.live
rapeme.best
sextoys.forum
tksobsghost.cloud
postalbro.com
writemeplz.net
vetements.help
pivete.store
fivegen.fr
vierasigma.shop
galaxygas.cc
fivemonline.store
xitados.cloud
gamershubcloud.com
spacemail.icu
fivemrockie.eu
blowglass.xyz
reidasrock.cloud
yesreply.online
leanmenu.net
honeypie.store
xiters.cloud
gmoil.online
id-kirby.usersinbuckets.com
mmoko.com
p1177.net