Hi HN, I built this to solve the fake signup problem in SaaS apps.
About 23% of signups use disposable emails from services like
Guerrilla Mail and 10MinuteMail. Each costs ~$0.50 in compute
and AI credits.
The npm package works fully offline with 160K+ domains in a Set
(O(1) lookup, <1ms). The API adds DNS/MX fingerprinting — even
when disposable services rotate domains, their mail servers stay
the same, so you can catch new ones before any list updates.
Risk scoring 0-100 using domain age, MX self-referencing patterns,
and behavioral signals.
CS student from Pakistan. First real open-source project.
Would love feedback on the detection approach.