Skip to content

Instantly share code, notes, and snippets.

@nocturnalgeek
Last active April 8, 2024 20:45
Show Gist options
  • Save nocturnalgeek/1b8fa44283314544c487 to your computer and use it in GitHub Desktop.
Save nocturnalgeek/1b8fa44283314544c487 to your computer and use it in GitHub Desktop.
A list of alternate domains that point to @mailinator.com
@binkmail.com
@bobmail.info
@chammy.info
@devnullmail.com
@letthemeatspam.com
@mailinater.com
@mailinator.net
@mailinator2.com
@notmailinator.com
@reallymymail.com
@reconmail.com
@safetymail.info
@sendspamhere.com
@sogetthis.com
@spambooger.com
@spamherelots.com
@spamhereplease.com
@spamthisplease.com
@streetwisemail.com
@suremail.info
@thisisnotmyrealemail.com
@tradermail.info
@veryrealemail.com
@zippymail.info
@markopy
Copy link

markopy commented Nov 12, 2021

@AlphaDG If you want all these things you are free so give them your real email and take the risk of the business being shady or just incompetent at keeping your information secure. And lets be real, a lot of websites asking for email will never need to send you an invoice or anything else important. Users know this.

The key part is that if you ask for an email let the user give you an email they are happy with, even if it's a temporary one. It doesn't mean an account is fake. It just means the user has made a rational decision regarding the tradeoffs involved.

As you can see in all these comments people just have been burned too many times and understand that a large percentage of sites have no real need for an email address and just use it to track people and spam them.

@AlphaDG
Copy link

AlphaDG commented Nov 13, 2021

@markopy I agree with you 100% on if someone feels they need a temp email, and I have no problem with that. I personally have an option that a lot of people don't have.. I have my own server, so I create a 'forwarding' email for every single site I sign up for, and every single supplier. It takes about a minute to create one :) If I start getting anything not from who that email was created for, I just delete that email. They are all real, and are from one of my own websites, but I never give out my 'main' email :)

Most websites I give an email, are suppliers, so I do need to keep an open line of communication with each. As for asking for emails, I run 6 social sites, so having something real so they get their friend requests, message notifications, etc is important to me, and I feel it is important to them. If they give a temp email, I don't see them being serious about their profile, or returning. I have found with over 60,000 members (total) that 99.9% who use a temp email never return, or complete their profile. So many social sites are full of fake {or BS) profiles, and I don't want to expose those to the other members. There is a logic to my methods :) All of my sites give each person the option to 'Not' receive any notifications, and when anyone creates an account, it is set to 'No Notifications' initially.

Lets look at the 'person' above who wrote "I USE THEM TO HARM FORUM OWNERS AND SYS ADMINS AS MUCH AS POSSIBLE!!!". Its because of people like that is why a lot of sites block temp emails. Creating thousands of fake profiles means nothing to me since I never see them. The software scans for empty profiles (not used in 3+ months) once a month and deletes them :) Each one takes a few bytes on a server with several terabytes of storage, and none are seen by other members. This guy is not 'harming' anyone, and wasting his time. :)

@markopy
Copy link

markopy commented Nov 13, 2021

@AlphaDG Sounds like we don't disagree on much anymore. 2015 was a long time ago and I'm glad you automated things and don't spend 4-5 hours each week deleting fake profiles anymore :)

And that's really my main point. If someone using a fake email is "harming" your site you are doing something fundamentally wrong and need to take a step back and look a the bigger picture of why that is instead of reflexively blocking those emails.

Is it because people are forced to register when they shouldn't, like in all of @tsutsu's examples?

Are you trying to fight professional spammers, in which case a captcha before signup is probably much more effective? Also nofollow links, etc.

Are you trying to protect the culture and active members of your forum? If so, sure, you can use a fake email as a weak signal but there is no need to outright block them. You will likely get better results by simply using their behavior on your site to decide whether to ban them.

All the website operators who hate mailinator should take a moment to consider why it exists in the first place. It's not because the people who use it are primarily malicious, they are just trying to protect themselves. I mean this is such a big problem that even Apple has a feature now to automatically generate random emails for you: https://support.apple.com/en-us/HT210425

@maathieu
Copy link

Yes, there is no way we should use legitimate email addresses online for anything except the most important resources we use (banking, social security, tax office). All the rest is too much at risk of being hacked or leaked, as webmasters do not properly maintain and apply security updates to their websites and forums. Not associating a real email to random website registration forms is a good security practice, as is a regular check on haveibeenpwned...

@mikeknapp
Copy link

Be careful: willmedtrainingsolutionscom's list includes @gmail.com!

@markopy
Copy link

markopy commented Sep 24, 2022

It also contains @gmx.com which is used by millions of people. Since he is using the list for lead generation he is probably doing them all a favor though.

@bucketss
Copy link

bucketss commented Jan 8, 2024

I ban disposable email providers from my forum the moment they're noticed by staff. We don't send a newsletter. We don't send unsolicited mail.

gmail accounts are free so i'm not sure what you think you're accomplishing here

@springjools
Copy link

@bucketss gmail accounts are not free.

If something appears to be free, you are the product.

@setop
Copy link

setop commented Apr 8, 2024

as of today

domain status
binkmail.com
bobmail.info
chammy.info
devnullmail.com
fakeinformation.com
letthemeatspam.com
mailinater.com
mailinator2.com
mailinator.com
mailinator.net
mailismagic.com
mailtothis.com
monumentmail.com
notmailinator.com
reallymymail.com
reconmail.com
safetymail.info
sendspamhere.com
sogetthis.com
spambooger.com
spamgoes.in
spamherelots.com
spamhereplease.com
spamthisplease.com
streetwisemail.com
suremail.info
thisisnotmyrealemail.com
tradermail.info
veryrealemail.com
zippymail.info

@szepeviktor
Copy link

Those with ❌ moved to another IP: https://bgp.he.net/ip/146.71.77.198#_dnsrecords

@setop
Copy link

setop commented Apr 8, 2024

@kode54

Interesting debate

I ban disposable email providers from my forum the moment they're noticed by staff.

Then you probably won't see me there, and probably don't miss much either :)

We don't send a newsletter. We don't send unsolicited mail.

sure but do I have to trust you to never ever have data leak ?

Maybe someone above suggested it would be a better idea to require SMS verification?

there are ways to get disposable mobile number even if a bit harder than getting email address

spammers

I manage a community driven event platform (think of meetup.com but free), and most (I would say 99%) of the spam comes from users having a gmail address. Still I can't ban gmail as most (I would say 50%) of the legit users are also having gmail address.

But hey, your plaftorm, your rules.

@setop
Copy link

setop commented Apr 8, 2024

Those with ❌ moved to another IP: https://bgp.he.net/ip/146.71.77.198#_dnsrecords

still operated by mailinator ? afaict, it seems not.

plus some are "ns1.namefind.com" so domain to sell.

@patricker
Copy link

@setop after ~10 years, I'm not surprised it's not up to date. The code I wrote to build this is long gone.

@setop
Copy link

setop commented Apr 8, 2024

@patricker

@setop after ~10 years, I'm not surprised it's not up to date. The code I wrote to build this is long gone.

Sure that was it was worth an update ;)

And thanks for the initial job of collecting them.

I recovered it as you message remind me I did the same in the past :)
I know they use to show some of them on homepage. This is not the case anymore.
My list - and the code I used to build it - is eight years old.
I merged our both lists in my comment.

Do you have any source to get more of them ?

@kode54
Copy link

kode54 commented Apr 8, 2024

Not my platform any more. I divested myself from it. They can clean up after all the spam manually.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment