Read this in: English · 简体中文 · 繁體中文 · 日本語 · 한국어 · Русский · Українська · Deutsch · Français · Español · Português (Brasil) · Italiano · Nederlands · Polski · Čeština · Slovenčina · Magyar · Română · Български · Srpski · Hrvatski · Ελληνικά · Türkçe · Azərbaycanca · Қазақша · Oʻzbekcha · فارسی · العربية · עברית · हिन्दी · বাংলা · اردو · தமிழ் · తెలుగు · मराठी · മലയാളം · ไทย · Tiếng Việt · Bahasa Indonesia · Bahasa Melayu · Filipino · မြန်မာ · Kiswahili · Svenska · Dansk · Norsk · Suomi · ქართული · Հայերեն · नेपाली
219,506 disposable, temporary and throwaway email domains. One plain list, refreshed around the clock.
MIT licensed · no signup, no API key, no rate limits · updated 09.09.2026
Throwaway inboxes are how fake accounts get made at scale: sign up, grab the confirmation link, burn the free tier, repeat. This is the open disposable-email database behind ffraud.com, every temporary, disposable and throwaway mail domain we can find, in one plain text file. New throwaway services appear every single day, so the list is rebuilt every 30 minutes: what you pull is what is live right now, not a snapshot from last week. No signup, no API key, no rate limits.
- 219,506 disposable and temporary email domains, one per line, sorted, ready to load into a
Set - Rebuilt and pushed every 30 minutes. The commit history is the changelog, and
metadata.jsoncarries the exact build time - Detection goes past the list itself: the engine behind ffraud.com also recognises throwaway services by their mail infrastructure, which catches a brand-new domain on the day it appears, before any list has it
- Mainstream and paid mail providers are deliberately excluded, so a real customer on their own domain is never mistaken for a throwaway
- MIT licensed, commercial use included, no attribution required
- One plain text file. No archive, no schema, no client library
| File | Rows | What it is |
|---|---|---|
disposable-email-domains.txt |
219,506 | One disposable or temporary email domain per line, lowercased and sorted |
metadata.json |
— | The live count and the UTC build time, so a script can tell how fresh its copy is |
# The whole list, one domain per line
curl -s https://raw.githubusercontent.com/FFraud-com/disposable-email-domains/main/disposable-email-domains.txtLoad it into a Set and reject the domain part of an address at signup. At this size an in-memory lookup costs nothing, and you block the throwaway account before it ever reaches your database.
You do not have to download the list to check one address. The public API needs no key and has no daily cap:
# Full intelligence for one IP: score, reason, categories
curl -s https://api.ffraud.com/public/ip/80.82.77.33
# Is this address disposable?
curl -s -X POST https://api.ffraud.com/public/email/check -H 'content-type: application/json' -d '{"email":"test@mailinator.com"}'
# Does this domain hand out throwaway mailboxes?
curl -s https://api.ffraud.com/public/domain/mailinator.comFor agents and assistants: ffraud.com/llms.txt is the machine index, ffraud.com/llms-full.txt is every doc page as plain Markdown, and ffraud.com/openapi.json is the OpenAPI spec. All three are public, need no key, and are meant to be fetched directly. Humans who prefer a page can use the free checkers at ffraud.com/tools.
Two things build it: our own honeypot sensor network, which watches which services are handing out throwaway mailboxes, and reports from people running signup forms that got abused. Every candidate is verified by the ffraud engine before it is published.
The engine also recognises a throwaway service by the mail infrastructure behind it, not only by the domain name. Temp-mail operators buy new domains constantly but keep pointing them at the same handful of mail servers, so a brand-new domain can be recognised on the day it appears, weeks before any list contains it.
The same reasoning is what keeps real businesses off this list. Mail platforms serving the general public, from Google Workspace and Microsoft 365 to IONOS, Strato, GMX, Proton, Zoho and iCloud, are excluded by name, because a throwaway service parking a domain next to a million real customers says nothing about those customers. Being cautious here costs us a few detections; being careless would cost somebody a real signup.
How often does it actually update?
Every 30 minutes, rebuilt from the live engine and pushed here. The commit list on this repo is the honest record, and metadata.json holds the exact UTC build time of the copy you have.
Can I use this in a commercial product?
Yes. MIT, no attribution required, no separate commercial licence, nobody to ask.
Will this block Gmail, Proton or my customers' own domains?
No. Mainstream consumer and business mail providers are excluded on purpose, and so are the platforms that host mail for other people's domains. The list is throwaway services only.
A domain is missing. Can I add it?
Please do. Report it at ffraud.com/report or open an issue here. We verify it and confirmed domains ship in the next build, within half an hour.
Something legitimate is on the list. How do I get it removed?
Tell us at ffraud.com/report with the domain. False positives are the expensive kind of mistake and we treat them that way: a confirmed one is cleared on the next build.
Is there an API for single addresses?
Yes, and it needs no key. See the section above, or the free checker at ffraud.com/tools/email-blacklist-check.
This database grows with the people using it. If you run servers, fail2ban, a WAF, or your own honeypots, send us what hits you and we publish it: report at ffraud.com/report, point fail2ban at the drop-in endpoint, or open an issue here. We verify, deduplicate and score every submission, and confirmed ones ship in the next build, within half an hour, with credit if you want it.
- IP Fraud Database: our open database of confirmed-malicious IP addresses and high-abuse networks, each scored, categorised, and independently confirmed.
- ffraud.com: free IP and email fraud intelligence: a public API with no key, live checkers, and all of this data.
MIT. Use it anywhere, including in commercial products. Fork it, redistribute it, build a business on it. Attribution is appreciated and never required.
Built by [ffraud.com](https://ffraud.com). Free fraud intelligence, for everyone.