1
March 20, 2011

Scrub against temporary email addresses

Validating a user’s email addresses is a must, but most developers just pop in the first premade validation function they find without actually evaluating how effective it is.

Most canned functions simply:

  • Check for the @ symbol
  • Check if the domain has a “dot something” at the end

More advanced ones:

  • Check if the domain is actually registered via cURL or PHP functions like dns_get_record and checkdnsrr
  • Check if the TLD exists (against a list of all known ICANN TLDs)
  • Check for existing accounts with the same email, minus periods and pluses (for services like Gmail where bbqsauce@gmail.com, b.b.q.sauce@gmail.com, and bbq.sauce+tastesgood@gmail.com go to the same inbox)

Still, I have never seen a script to filter against disposable email services. Disposable email services allow users to generate a temporary email addresses in a single click. I’ve used mailinator.com over a dozen times to register for a site that I only want to use once. I never have seen a site filter against it.

So here comes Brian to the rescue, giving all you validation junkies a huge list I complied of 119 disposable email domains to check against. If you prefer, you can download this list as a PHP array.

Disposable Email Domains

mailinator.com
thisisnotmyrealemail.com
mailmetrash.com
mytrashmail.com
trashymail.com
mt2009.com
trash2009.com
thankyou2010.com
guerrillamailblock
meltmail.com
mintemail.com
tempinbox.com
fatflap.com
dingbone.com
fudgerub.com
beefmilk.com
lookugly.com
smellfear.com
yopmail.com
jnxjn.com
example.com
spamgourmet.com
jetable.org
dunflimblag.mailexpire.com
spambox.us
tempomail.fr
tempemail.net
spamfree24.org
spamfree24.de
spamfree.info
spamfree.com
spamfree.eu
spamavert.com
maileater.com
mailexpire.com
spammotel.com
spamspot.com
spam.la
hushmail.com
hushmail.me
hush.com
hush.ai
mac.hush.com
abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijk.com
mailnull.com
sneakemail.com
e4ward.com
spamcero.com
mytempemail.com
incognitomail.org
mailcatch.com
deadaddress.com
mailscrap.com
anonymbox.com
soodonims.com
tempail.com
20minutemail.com
deagot.com
demail.tk
yestoa.com
anontext.com
shieldemail.com
temporaryemail.net
disposeamail.com
mailmoat.com
noclickemail.com
trashmail.net
kurzepost.de
objectmail.com
proxymail.eu
rcpt.at
trash-mail.at
trashmail.at
trashmail.me
trashmail.net
wegwerfmail.de
wegwerfmail.net
wegwerfmail.org
yopmail.com
yopmail.fr
yopmail.net
cool.fr.nf
jetable.fr.nf
nospam.ze.tc
nomail.xl.cx
mega.zik.dj
speed.1s.fr
courriel.fr.nf
moncourrier.fr.nf
monemail.fr.nf
monmail.fr.nf
emailias.com
zoemail.com
wh4f.org
despam.it
disposableinbox.com
fakeinbox.com
quickinbox.com
emailthe.net
tempalias.com
explodemail.com
xyzfree.net
10×9.com
12minutemail.com
we.nispam.it
no-spam.ws
mytemporarymail.com
yxzx.net
goemailgo.com
filzmail.com
webemail.me
temp.emeraldwebmail.com
fakemail.fr
my-inbox.in
mail-it24.com
tittbit.in
temporaryemailaddress.com
temporaryemailid.com
mail.cz.cc

Got another validation check? I’d love to hear about it in the comments.