Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Block account verification with maskmy.id disposable domain #368

Open
ghost opened this issue Dec 12, 2023 · 4 comments
Open

Block account verification with maskmy.id disposable domain #368

ghost opened this issue Dec 12, 2023 · 4 comments

Comments

@ghost
Copy link

ghost commented Dec 12, 2023

Provider is https://skiff.com/quick-alias and it's actually subdomains, each user can generate their own subdomain. I tested it, very easy.

The page title of https://skiff.com/quick-alias is "Quick alias burner email address". In the HTML I see

<meta name="description" content="Secure and quick-to-create burner email addresses with Skiff!

There is a browser plugin https://github.com/irazasyed/email-masker to create one email per website, skiff.com's twitter account promoted it, the github repository is tagged as 'burner-email'

You should add:

  • maskmy.id because it is there main domain
  • anything.maskmy.id because it allows you to create disposable addresses with random subdomains

IMG_1500
IMG_1501

@ghost
Copy link
Author

ghost commented Dec 12, 2023

Abusers can sign up with disposable email to bypass disposable mail block, but this can cause Proton being blocklisted.

So I think it is good idea to use something like this:
https://github.com/micke/valid_email2
https://github.com/7c/fakefilter

To block disposables from signing up

@ghost
Copy link
Author

ghost commented Dec 12, 2023

@acasajus @bartbutler

@ghost
Copy link

ghost commented Jan 3, 2024

Also

mailbox.zip
sailmail.io

They added new domains:
IMG_1719

@ghost
Copy link

ghost commented Jan 3, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

0 participants