How the list is maintained
200,000+ domains, six sources merged
Six independently-maintained disposable-domain lists combined into one set, so no single list's blind spots become yours.
A curated allowlist, subtracted
Known-legitimate providers are checked against a maintained allowlist and excluded, so a looser source can't cause a false positive on a real inbox.
Versioned updates
Every refresh is checksummed and record-counted, so you can see exactly when and how much the list changed.
Separate from free-provider detection
Gmail, Outlook and similar are never flagged as disposable — they're a different classification entirely.
Heavily weighted risk signal
One of the highest base-weighted signals in the scoring model — close to a domain not existing at all.
Admin-manageable list
Domains can be reviewed and adjusted directly, not just replaced wholesale on each refresh.
Example request
curl https://api.emailriskradar.com/v1/email/check \
-H "Authorization: Bearer $API_KEY" \
-H "Content-Type: application/json" \
-d '{"email": "test@mailinator.com"}'FAQ
No. Free providers like Gmail and Outlook are legitimate, ongoing mailbox services. Disposable providers are specifically designed for temporary, throwaway addresses — they're tracked as separate classifications.
Yes — that's exactly what makes them useful for evading confirmation-email verification, which is why a domain-level list check is the right tool for catching them.
It's merged from six independently-maintained sources (with a curated allowlist subtracted to catch false positives), refreshed on a schedule, with every update versioned and diffed against the previous set.
For most SaaS and lead-generation use cases, yes. Some privacy-focused products may deliberately allow it — the signal is returned either way so you can set your own policy.