How to detect disposable email domains without relying on 3rd party APIs and lists
To scale a fraud or bot attack, adversaries need more than just realistic automation. They need infrastructure.
A convincing browser fingerprint and human-like interaction (mouse movements, keystrokes, etc.) are table stakes. But even with a clean setup, most attackers also need:
- Proxies to spread activity across thousands of IPs (ideally geolocated near the target)
- Fake accounts to register or log in without triggering rate limits or blocking rules
And for most fake accounts, you need an email address. Creating fake Gmail or Outlook accounts is possible, but costly. These platforms deploy anti-abuse systems, making it harder to register accounts at scale without phone verification or behavioral challenges. Attackers still find ways (we see plenty of bots using Gmail addresses), but disposable email providers remain a far cheaper and faster alternative.
Disposable emails are temporary inboxes designed for short-lived, anonymous use. They let attackers create accounts without leaving a long-term trace.
For a deeper dive into how disposable email services work, see our article: "Understanding Disposable Emails".
In this article, we focus on how to detect disposable email domains without relying on third-party APIs or static lists. You’ll learn:
- Signals and infrastructure-level heuristics you can extract yourself (e.g. DNS MX records, WHOIS, website content)
- How these techniques apply in real-world examples
- Why combining weak signals can create high-confidence detections
- A curated list of 600+ disposable email service domains to help you bootstrap detection
Understanding disposable emails and why attackers use them
Disposable email services provide users with a temporary inbox, often valid for just a few minutes or hours. These inboxes are typically accessible via a simple web interface, with no authentication or password required. Once created, anyone who knows the address can read incoming messages.
From a fraud perspective, disposable emails offer two main advantages:
- Instant access to a valid inbox without needing to manage or verify ownership of a real email account.
- Built-in anonymity and churn, making them ideal for throwaway accounts, one-time verifications, and short-lived spam campaigns.
These services are widely used in account abuse attacks, spam submissions, and SaaS free tier abuses, anywhere attackers need to register or log in repeatedly without reusing identity signals.
For a deeper breakdown of how disposable emails work, the different types, and what makes them effective for attackers, see our earlier post: Understanding Disposable Emails.
How to detect disposable email domains using infrastructure-level signals
Open-source lists and paid detection APIs can be useful, but they tend to be reactive. New disposable domains appear constantly, often using fresh infrastructure or obscure subdomains that aren’t yet flagged.
If you want to stay ahead of attackers, it helps to go a level deeper and extract your own signals. Below are techniques you can use to detect disposable email domains based on DNS records and simple infrastructure fingerprinting. In this article, we focus mostly on the raw signals. You can refer to our “Finding links between fraudulent email domains using graph-based clustering” article to learn more about how you can use these signals using a graph-based approach.
We’ll walk through real-world examples using domains from services like mail.tm and tempmail.lol to show how these signals work in practice.
MX records: Reused infrastructure across disposable domains
One of the strongest infrastructure signals for detecting disposable email domains is their MX (Mail Exchange) DNS record.
The MX record specifies which server handles email for a domain. Many disposable email services manage hundreds of domains using shared infrastructure. As a result, unrelated-looking domains often point to the same MX host. This makes MX records a reliable way to detect and cluster disposable domains, even when they’re newly registered or not yet flagged elsewhere.
Example: powerscrews.com
The disposable email service mail.tm generates throwaway inboxes like:
27alvira@powerscrews.com
We can obtain its associated DNS MX records as follows:
dig MX powerscrews.com +short
The result is :
10 in.mail.tm.
This reveals that powerscrews.com uses in.mail.tm to handle email under the hood (which corresponds to the name of the disposable email service). Even if the domain itself isn’t widely known, the infrastructure behind it is.
This approach allows you to:
- Detect domains linked to known disposable email services by infrastructure
- Identify newly rotated domains as soon as they point to shared MX hosts
- Cluster unknown domains that point to the same mail handler
While not all disposable providers reuse infrastructure, many do, especially those that cycle through domains to evade detection. Monitoring MX records gives you a scalable way to stay ahead.
Domain content: Public-facing pages that leak intent
Another useful signal comes from inspecting the content served by the email domain over HTTP or HTTPS. Many disposable email providers host landing pages that clearly identify the domain as part of a public or temporary email service. To check this, you can issue a simple GET request to:
http://<email_domain> or https://<email_domain>
Example: powerscrews.com
In the earlier example, we received the address 27alvira@powerscrews.com from the mail.tm service. Visiting http://powerscrews.com in a browser reveals a minimal web page that confirms the domain is part of a public email platform:
While attackers could configure this page to look like anything, or return nothing at all, in practice, many disposable email services don't attempt to hide their purpose. They often include keywords such as "temporary", "disposable", "public inbox", or "anonymous email".
This makes it possible to:
- Automatically flag domains that explicitly mention keywords associated with disposable services
- Build a simple keyword scanner to use as a weak signal in a scoring system
- Detect services even when the MX records aren't shared or informative
Of course, this signal should not be used in isolation. It’s easy to spoof or remove. But combined with infrastructure-level data, it can strengthen your confidence that a domain is part of a disposable email provider’s ecosystem.
Note that the absence of a web page linked to the email domain is also a weak signal that can be used for detection.
Whois: Registration timing and metadata patterns
Whois records can offer useful metadata about an email domain’s registration, including the creation date, registrar, and name servers. While these attributes alone aren’t enough to confidently label a domain as disposable, they can serve as weak signals in a broader detection strategy.
Example: underseagolf.com
The domain underseagolf.com appears in emails generated by the disposable service tempmail.lol, such as:
gwyneth66cefa@ee.underseagolf.com
Looking up the MX record for this domain doesn’t yield anything obviously tied to a known service:
host underseagolf.com
Returns:
underseagolf.com mail is handled by 77 mx.underseagolf.com.
The MX record points to an internal subdomain—mx.underseagolf.com—which offers no clear link to a disposable provider. But the Whois data is more revealing:
whois underseagolf.com
Key observation:
Creation Date: 2025-01-14T17:54:29Z
The domain was registered just a few months ago. This is typical for disposable domains, which are often created in bulk and used for short periods before being rotated or abandoned.
Other data points from Whois, such as the registrar (e.g., Cloudflare) or use of privacy protection services, can also be informative. Many disposable domains use privacy-shielded registration or the same registrar accounts across multiple domains.
These signals are not definitive on their own. Legitimate domains can also be newly registered or privacy-protected. But in combination with infrastructure patterns (MX records, shared IPs) or behavioral signals (e.g., low-quality account activity), Whois metadata can support classification or help explain a decision.
TXT records: Missing SPF, DKIM, and DMARC as weak signals
Beyond MX records, other DNS record types, especially TXT records, can provide indirect signals about whether an email domain is disposable. In particular, the presence (or absence) of SPF, DKIM, and DMARC records can help differentiate between legitimate domains and low-effort throwaway domains.
These records are typically used to authenticate outbound email. While not required for receiving email, they are considered standard for most legitimate domains.
SPF (Sender Policy Framework)
SPF records specify which servers are authorized to send email on behalf of a domain. They are published as TXT records at the domain root.
Example for openai.com:
dig TXT openai.com +short
Output:
"v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:8050860.spf04.hubspotemail.net include:mktomail.com -all"
This record shows that OpenAI explicitly configures SPF with multiple providers. Most businesses do the same, especially if they send email via Gmail, Outlook, or marketing platforms like HubSpot or Marketo.
In contrast, many disposable domains don’t publish SPF at all. They don’t need to send emails to real users, so they skip this step entirely. The absence of SPF isn’t proof that a domain is disposable, but it’s a useful weak signal.
DMARC (Domain-based Message Authentication, Reporting, and Conformance)
DMARC builds on SPF and DKIM to define a domain’s policy for handling unauthenticated email. It also uses a TXT record, but it’s published at a fixed subdomain:
dig TXT _dmarc.openai.com +short
Output:
"v=DMARC1; p=reject; rua=mailto:tdfyvl0n@ag.dmarcian.com; ruf=mailto:tdfyvl0n@fr.dmarcian.com; fo=1; aspf=r"
This tells recipients to reject unauthenticated email (p=reject) and send reports to two DMARC monitoring addresses. Again, most legitimate domains publish some DMARC policy, even if it’s minimal.
Using DNS records as weak signals
Disposable domains often:
- Omit SPF, DKIM, and DMARC entirely
- Publish minimal or invalid records
- Use free infrastructure that doesn’t support proper mail authentication
You can check for the presence of these records programmatically and use them as scoring features. This signal works best when combined with others like recent Whois creation, shared MX infrastructure, or content indicators from the domain’s web server.
Mail server IPs: Linking disposable domains across MX records
Even when disposable email domains use distinct MX records, they often share the same underlying IP infrastructure. This reuse can expose connections between otherwise unrelated-looking domains and help you identify clusters of disposable domains operated by the same provider.
Example: pigeonprotocol.com and jailbreakeverything.com
When browsing tempmail.lol, we observed the following:
- The first generated address was linked to
7q.pigeonprotocol.com - The second address was linked to
4l.jailbreakeverything.com
These domains appear unrelated, and their top-level MX records confirm they use different mail hosts:
host pigeonprotocol.com
pigeonprotocol.com mail is handled by 92 mx.pigeonprotocol.com.
host jailbreakeverything.com
jailbreakeverything.com mail is handled by 123 mx.jailbreakeverything.com.
At this point, there’s no obvious link between them: different domains, different MX subdomains. But resolving the MX hosts to IP addresses reveals a shared backend:
host mx.pigeonprotocol.com
mx.pigeonprotocol.com has address 155.138.245.114
host mx.jailbreakeverything.com
mx.jailbreakeverything.com has address 155.138.245.114
Despite the distinct MX records, both domains ultimately route email through the same IP address, 155.138.245.114, which belongs to Vultr.
This pattern is common among disposable email services that register many domains but reuse the same infrastructure behind the scenes. By grouping domains by mail server IP, you can:
- Detect new or unlisted disposable domains that share backend infrastructure
- Flag bulk domain registrations tied to the same mail service
- Build linkage graphs between seemingly unrelated disposable providers
This method isn’t foolproof, some legitimate email services may also share hosting, but in combination with other signals (recent Whois, no SPF/DMARC, public email pages), shared mail IPs are a strong clustering signal.
Summary: Key signals + a curated list of disposable email domains
Detecting disposable email domains isn’t just about maintaining a static list or integrating a third-party API. With a few simple signals related to DNS or domain information obtained with whois, you can uncover strong signals directly from a domain’s infrastructure.
Here’s a quick summary of the techniques covered:
- MX records: Many disposable domains route mail through known providers like
in.mail.tm. Even when the domain is new, the MX host often reveals the underlying service. - Website content: Visiting the domain may return a public-facing landing page describing the service. Scanning for keywords like “temporary” or “disposable” can help.
- Whois metadata: Disposable domains are often newly registered, use the same registrars, or apply privacy protection by default. None of these are determinative, but they contribute as weak signals.
- SPF, DKIM, and DMARC: Disposable domains often lack basic DNS records used by legitimate domains to authenticate email. Their absence can be a useful heuristic.
- IP reuse across MX records: When providers register many domains but use the same mail server IP, you can cluster and identify them even if the domain names or DNS entries differ.
These signals can be combined into a simple rule-based system or fed into a scoring model. The goal isn’t to achieve perfect precision from one signal—but to combine many weak signals into a high-confidence decision. In another article, we presented how you can also use a graph-based approach to cluster email domains using technical signals as well as server side fingerprints.
To help you bootstrap your detection, we’re also including a list of more than 600 domains used by disposable email services. These are the hostnames of services that offer disposable inboxes, not necessarily the specific domains used in the emails themselves, but they’re a good starting point for crawling, testing, or infrastructure mapping.
[
"tempr.email",
"spamgourmet.com",
"dropmail.me",
"10minut.com.pl",
"10minutemail.co.za",
"10minutemail.com",
"10minutesmail.com",
"www.mailinator.com",
"addy.io",
"getnada.com",
"forwardemail.net",
"yopmail.com",
"m.kuku.lu",
"mailgun.com",
"anonbox.net",
"anonmails.de",
"www.fakemailgenerator.com",
"spamok.com",
"www.moakt.com",
"mytemp.email",
"www.mintemail.com",
"improvmx.com",
"www.byom.de",
"shitmail.org",
"tempmailbox.net",
"lortemail.dk",
"spamdecoy.net",
"disposeamail.com",
"www.dispostable.com",
"www.mail-temporaire.fr",
"muellmail.com",
"www.eyepaste.com",
"mailsac.com",
"www.trash-mail.com",
"www.fyii.de",
"inboxes.com",
"www.guerrillamail.com",
"harakirimail.com",
"instantemailaddress.com",
"emailfake.com",
"trashmail.com",
"temp.cab",
"mailcatch.com",
"maildrop.cc",
"mailnesia.com",
"tempm.com",
"www.mohmal.com",
"shitmail.me",
"spoofmail.de",
"tempmail.co",
"temporarily.de",
"www.trashmail.de",
"www.trashmail.org",
"trashmail.ws",
"temp-mail.org",
"mail.tm",
"www.mytrashmailer.com",
"www.mail-tester.com",
"email-temporaire.fr",
"temp-mail.us",
"www.tempemail.pro",
"etlgr.io",
"10minut.xyz",
"email-fake.com",
"hi2.in",
"ruu.kr",
"fakermail.com",
"mail-fake.com",
"mail-temp.com",
"33mail.com",
"dispomail.xyz",
"trashinbox.net",
"tempmail.world",
"smailpro.com",
"tempmail.ninja",
"www.fakemail.net",
"temporary-mail.net",
"www.minuteinbox.com",
"gecicimail.com.tr",
"tempmail.cn",
"maildim.com",
"haribu.net",
"tmailweb.com",
"www.disposablemail.com",
"www.linshi-email.com",
"tempmail.lol",
"etempmail.com",
"snapmail.cc",
"tempmail.so",
"incognitomail.co",
"www.tmail.gg",
"emailtemp.org",
"temp.tempsmail.net",
"mail.0du.win",
"correotemporal.mx",
"temp-mail24.com",
"tempmail.cc",
"tempmail.im",
"besttemporaryemail.com",
"tempmail.one",
"10p.email",
"correostemporales.com",
"tempemailer.org",
"placebomail10.com",
"shiumail.com",
"priyo.email",
"temp-mailbox.net",
"tempmailbox.co",
"temp.name.ng",
"tempmails.net",
"temp-mail.me",
"mailtemp.dev",
"tmail.la",
"tempmail100.com",
"tempmailusa.com",
"teminbox.com",
"temp-mail-email.org",
"tempmailturbo.com",
"tempmail.tn",
"khayden.com",
"tempmailpro.net",
"gmail.pm",
"mailbox49.com",
"tempmailhub.site",
"tempmail.asia",
"mailgolem.com",
"inboxturtle.dev",
"fakemaile.com",
"tempmail.now",
"www.servicee.es",
"temporary-mail.in",
"minutemail.io",
"tempmailer.xyz",
"burner.kiwi",
"temporarify.com",
"kindamail.com",
"www.tempemail.dev",
"tempmail.gg",
"blinkmailnow.com",
"tempbox.co.uk",
"www.gmailtemp.com",
"tempmailonline.xyz",
"www.tempemaill.com",
"vortex.skyfall.dev",
"mailtemporarily.org",
"www.fake-mail.net",
"1sec-mail.com",
"tempmailten.com",
"burnermail.io",
"www.throwawaymail.com",
"10minutemail.net",
"spambox.xyz",
"www.phaantm.de",
"nospam.today",
"bccto.me",
"tenmail.org",
"www.emailondeck.com",
"generator.email",
"rootsh.com",
"mailgen.biz",
"www.1secmail.com",
"airmailbox.website",
"tempmail.io",
"altmails.com",
"rainmail.xyz",
"10minemail.com",
"onetempmail.com",
"gettempmail.com",
"temp-mail.io",
"www.tempemails.net",
"xkx.me",
"tempail.com",
"www.tempmailaddress.com",
"10minutetempemail.com",
"mail.gw",
"tempmailninja.com",
"tpmail.pl",
"189.email",
"www.freecustom.email",
"temp-mail-generator.com",
"tempmailo.io",
"fakeemail.net",
"tempmailo.com",
"temporary-email.org",
"tempmailg.com",
"email10min.com",
"email10min.net",
"mailtemp.net",
"robelmail.com",
"10minutemail.now",
"tempmailnator.com",
"noopmail.org",
"mailclone.top",
"jettemp.com",
"tempmailfree.net",
"www.tempsmails.com",
"hourly-mail.com",
"www.tempinbox.xyz",
"10mails.net",
"tmpemails.com",
"one-off.email",
"tempmail.plus",
"fex.plus",
"protectmyemail.net",
"mailpoof.com",
"tempmailgen.com",
"gpa.lu",
"15qm.com",
"tempmail.dev",
"www.onetimeusemail.com",
"anonymmail.net",
"fakemail.io",
"mail.td",
"www.lsyx24.com",
"mail.mjj.edu.ge",
"temporaremail.com",
"temp-mail.to",
"10minutesemail.net",
"cryptogmail.com",
"disposemymail.com",
"tempmailer.net",
"anonimailer.com",
"findtempmail.com",
"mail.gen.tr",
"gecicimail.co",
"temprmail.com",
"abandonmail.com",
"hizli.email",
"temp-inbox.com",
"tempmail.tel",
"tempos.email",
"10minuteemails.com",
"dispemail.com",
"foxiomail.com",
"hottempmail.com",
"brodilla.email",
"instant-email.org",
"mail7.io",
"throwaway.io",
"10minutesmail.us",
"another-temp-mail.com",
"www.another-temp-mail.com",
"developermail.com",
"luxusmail.org",
"tempo-mail.xyz",
"www.tempo-mail.com",
"temporarymail.com",
"maildax.com",
"tempmailto.com",
"dizymail.com",
"t-mail.org",
"tempmailid.com",
"tempmaily.com",
"spitemail.com",
"www.txen.de",
"www.temp-mails.com",
"yopmail.fr",
"tempmailed.com",
"default.tmail.thehp.in",
"www.minutemailbox.com",
"www.tempmail.vip",
"tempo-email.com",
"nolog.email",
"www.getmailet.com",
"trashmailgenerator.de",
"tempomail.org",
"stopspam.app",
"gmailcity.com",
"qooqle.cc",
"mail1a.de",
"minimail.eu.org",
"yourmail.online",
"disposableemail.us",
"temptrashmail.com",
"trashmail.live",
"freemailzone.com",
"uranomail.es",
"ahmedkhlef.com",
"mailhole.de",
"meetmedassi.com",
"freetemporaryemail.com",
"tempmaili.com",
"mail-jetable.com",
"quik.email",
"tempmail.net",
"www.tempmail-online.com",
"mailmenot.io",
"tempmailo.org",
"tempimail.org",
"tmp-mail.ru",
"tmpx.email",
"www.instant-email.org",
"tuamaeaquelaursa.com",
"tempmail.com.tr",
"emailbin.net",
"internxt.com",
"10minute-email.com",
"skiff.com",
"inboxesapp.com",
"www.trashmail-mailbox.com",
"48hr.email",
"email1.io",
"mailify.org",
"www.phantom-mail.io",
"mail4qa.com",
"tmail.link",
"bump.email",
"tempmail.best",
"tempmail.email",
"zemail.me",
"ephemeralpostal.com",
"etempmail.net",
"nicemail.cc",
"tmailor.com",
"mailswipe.net",
"poo.email",
"signinid.com",
"www.mailslurp.com",
"webhook.site",
"1secmail.ru",
"currentmail.com",
"tempmail.co.uk",
"fmptestuje.pl",
"akmail.in",
"edumail.icu",
"tempmail.run",
"getnada.cc",
"www.ghostlymail.com",
"www.tempmail.us.com",
"www.phantomsign.com",
"upxmail.com",
"www.cloaked.com",
"maillog.org",
"tempemailfree.com",
"tempmailto.org",
"mailphantom.io",
"tempmail.ac.id",
"tempmailchecker.com",
"tempmailpremium.com",
"temp-mail.solutions",
"www.mailtemporal.net",
"www.temporary-mail.eu",
"temp-mail.best",
"tempmailbox.vip",
"tempail-mail.com",
"tempemailo.org",
"correo-temporal.com",
"www.securetempmail.com",
"bupmail.com",
"www.emailgenerator.org",
"tempmailfast.com",
"tempmaili.org",
"sipemail.com",
"www.receivemail.org",
"mail1s.net",
"correo-temporal.org",
"24hour.email",
"www.my24h.email",
"temp.now",
"mytemp-mail.com",
"tempmail.es",
"tempermail.com",
"api.internal.temp-mail.io",
"mail.loli.vet",
"www.mymailprotection.xyz",
"tmp.al",
"temp-mail.id",
"getemails.uk",
"10minutemailpro.com",
"temp-inbox.me",
"temp-mailing.com",
"tempemail.id",
"justatemp.com",
"tempmailo.me",
"temporarymail.email",
"tempmail.ca",
"tempmailx.net",
"fake-email.xyz",
"tempemailgen.com",
"mtempmail.com",
"temp-mail.lol",
"2minutesmail.com",
"altaddress.org",
"reusable.email",
"xtemp-mail.com",
"10minutemail.org",
"fviainboxes.com",
"mo2qt.com",
"www.eztempmail.com",
"tempmail.uno",
"tempmailm.com",
"temp-mails.online",
"www.temp-email.me",
"topshare.in",
"onetimemali.com",
"tm-mail.com",
"tmpmail.co",
"temporarly.com",
"www.tempmail.co",
"www.gmailnator.com",
"tempmail.pk",
"ztempmail.com",
"mailtemps.com",
"fakemail.email",
"disposableemail.co",
"tempp-mails.com",
"tempmail.guru",
"tem-mail.net",
"22.do",
"unlimitmail.com",
"dumpedmail.com",
"tempmail.biz.id",
"evapmail.com",
"tempumail.com",
"emailator.net",
"www.hoopmail.org",
"temp-mail.my",
"tmail.dark2web.com",
"10-minutemail.org",
"10-minutemail.net",
"tempmail.io.vn",
"tacomail.de",
"tempmailx.org",
"tempmail.ink",
"emailgenerator.email",
"instatempmail.cloud",
"tempmailall.com",
"www.amz123.com",
"hidemail.app",
"tempamail.com",
"firemail.com.br",
"tempmails.in",
"tempmailplus.xyz",
"taxt.email",
"10minutemail.info",
"mail.awsl.uk",
"segamail.com",
"trashmails.it",
"tempmail365.com",
"10minute-mail.org",
"tempail.site",
"tempmaile.me",
"temail.pro",
"temp-mail.club",
"temp-mail.in.net",
"mailcare.io",
"www.onetime-mail.com",
"temporarymail.cc",
"www.tmail.mekongmmo.com",
"tmail.mmomekong.com",
"faxmail.co",
"temp-email.info",
"run2mail.com",
"tempmail.pw",
"temp-mails.org",
"temp-email.lol",
"www.1secmail.cc",
"temporary-mail.org",
"temporarymail.in",
"10-minutemail.com",
"mailosaur.com",
"tempmail.my",
"tempmailbd.com",
"tempmailonline.co",
"tempmail.la",
"etempmail.xyz",
"mailper.com",
"testmail.app",
"inspacebox.com",
"10minutemail.co",
"mail7.fun",
"spamok.fr",
"spambox.pl",
"tmpmail.com",
"mailtemp.xyz",
"temporarydomain.net",
"tempmailt.com",
"tempmaill.net",
"1secmail.co",
"free-temp-mail.eu.org",
"tempmail.toolszu.com",
"1secmail.pro",
"premiumisme.info",
"temp.kopeechka.store",
"minutesmail.com",
"tempmail.id.vn",
"atomicmail.io",
"tempmailpro.xyz",
"momentaryemail.com",
"temp-mail.org.in",
"postinbox.org",
"temp-mailx.net",
"malil.xyz",
"mailtemp.top",
"mailtemp.uk",
"emailtemp.xyz",
"tempemail.live",
"quickinbox.me",
"mail1day.com",
"app.onetimeinbox.email",
"tempmail.quest",
"tempmailpro.site",
"www.temp-mail.it",
"temp-mail-world.com",
"verum.email",
"temp-mail.asia",
"extraclass.ng",
"temp-maile.com",
"www.voo-email.com",
"mail.zippyinbox.com",
"passbymail.com",
"delpost.ru",
"tempemailbox.com",
"tempmail.help",
"tempemails.xyz",
"temploop.net",
"boomlify.com",
"dustbin.one",
"tempuse.email",
"30minemail.com",
"tempmailer.online",
"tempmail44.com",
"temp-mail.cfd",
"easytrashmail.eu",
"temporam.com",
"www.cybertemp.xyz",
"itempmails.com",
"throwawaymail.app",
"tempmail.gratis",
"tempboxmail.com",
"www.pinmx.net",
"tempmail.knightz.id",
"purplemail.neweymail.com",
"trashlify.com",
"tempmail24.com",
"tempmaila.org",
"10minutemail.one",
"tempmailmaster.io",
"tempmailx.xyz",
"tempbox.fr",
"tempmailss.com",
"tempmail.bliink.in",
"awamail.com",
"tempmail.cool",
"eml.monster",
"fasttempmail.org",
"www.droptempmail.com",
"www.tempumail.org",
"dropmailx.com",
"tempmailz.com",
"mail10m.com",
"5min.email",
"temp-email.io",
"expressinboxhub.com",
"tempmailspin.com",
"mail-inbox.me",
"mytempsms.com",
"tempmailo.co",
"temp-emails.org",
"onetimeinbox.com",
"www.freetempmail.org",
"verify32.com",
"dashfree.net",
"zhimails.work",
"burnerinbox.net",
"tmail.nz",
"0mail.pro",
"www.1timeemail.com",
"temp-mail-365.info",
"24mail.json.cm",
"jjk.app",
"with.lt",
"zudy.info",
"best-temp-mail.com",
"www.foremailonly.xyz",
"zeromail.link",
"zyntra.app",
"tempmail3.com",
"mailer.ae",
"tempemil.com",
"minutemail.co",
"temp-emails.net",
"temp.ly",
"tempmailgenerator.co",
"email.by",
"temp-mail.work",
"tempmailex.com",
"www.einweg-email.com",
"worldtempmail.com",
"tempmail-68h.pages.dev",
"duckspam.com",
"burnboxmail.com",
"www.dyzov.com",
"msginbox.io",
"game-email.com",
"moohmal.com",
"10minutemail.cx",
"tempmail.host",
"mail.paicha.cloud",
"tempmail.sx",
"tempemail.co.uk",
"tempmailfor.com",
"tmail.uz",
"www.tempmailpro.in",
"tempmail10.com",
"tempmailbee.com",
"temp-mail.snaper24.com",
"fake-email.pro",
"adrestymczasowy.pl",
"5minmail.com",
"tempitmail.com",
"www.tempmail4me.eu",
"notrashmail.net",
"temp-mail.world",
"tempmailzu.com",
"tmp.waw.pl",
"tempmailnow.org",
"disposableinbox.xyz",
"tempmail.pink",
"thetemp.email",
"fasttempmail.com",
"mboxx.app",
"candymailbox.com",
"www.bune.pw",
"surfshark.com",
"forwardmx.net",
"startmail.com",
"proxiedmail.com",
"mailum.com",
"erine.email",
]