Re: [mailop] Help with identifying invalid email domains
Publicsuffix.org is a wonderful resource for the tlds But then the question of what a valid domain takes some interesting turns. Validate the mx and it is a parking domain whose mail traffic probably feeds a set of spamtraps? Or one of those trashmail type places that let you create an address that is valid for a bare 15 minutes? Or where the mx points to local host, a cname, or is broken in some other manner? --srs From: mailop on behalf of Luis E. Muñoz via mailop Sent: Thursday, May 26, 2022 8:04:48 PM To: mailop@mailop.org Subject: Re: [mailop] Help with identifying invalid email domains On 26 May 2022, at 6:18, Ken O'Driscoll via mailop wrote: > People should be validating email input fields as a matter of course. And then, do it correctly. One of my pet peeves is finding out forms that still think that there is no such thing as a .click email address. Tends to work better for TLDs 4 characters or less in length. Best regards -lem ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
On 2022-05-26 at 10:43:00 UTC-0400 (Thu, 26 May 2022 16:43:00 +0200) Daniele Nicolodi via mailop is rumored to have said: On 26/05/2022 16:34, Luis E. Muñoz via mailop wrote: On 26 May 2022, at 6:18, Ken O'Driscoll via mailop wrote: People should be validating email input fields as a matter of course. And then, do it correctly. One of my pet peeves is finding out forms that still think that there is no such thing as a .click email address. Tends to work better for TLDs 4 characters or less in length. Or that think that + is not a valid local part character... Or -, #, &, /, etc. Or think all domains under .com only use 3-label names. Or think that local parts can't be more than a dozen characters long. Validating an email address ultimately means mailing it in a way that triggers a response which proves conscious receipt. Gross sanity checks enforcing some formal rules (e.g. domain label length, ASCII, etc.) before accepting an address are sensible, but there's no evidence that anyone can deploy a perfect validator for the actual rules of email addresses. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
On 26/05/2022 16:34, Luis E. Muñoz via mailop wrote: On 26 May 2022, at 6:18, Ken O'Driscoll via mailop wrote: People should be validating email input fields as a matter of course. And then, do it correctly. One of my pet peeves is finding out forms that still think that there is no such thing as a .click email address. Tends to work better for TLDs 4 characters or less in length. Or that think that + is not a valid local part character... Cheers, Dan ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
On 26 May 2022, at 6:18, Ken O'Driscoll via mailop wrote: > People should be validating email input fields as a matter of course. And then, do it correctly. One of my pet peeves is finding out forms that still think that there is no such thing as a .click email address. Tends to work better for TLDs 4 characters or less in length. Best regards -lem ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
Absolutely, if that’s why the question was being asked. But even in that case, they still need to validate input during the COI process to reduce FPs when sending COI messages to domains with typos. A typo on the LHS means COI fails, which is the desired outcome. Plus, they can use other methods to reduce abuse of their COI process. People should be validating email input fields as a matter of course. Ken. From: mailop On Behalf Of Laura Atkins via mailop Sent: Thursday 26 May 2022 10:42 To: mailop@mailop.org Subject: Re: [mailop] Help with identifying invalid email domains Given that DuckDuckGo is in the business of forwarding email, they MUST use confirmed opt-in to avoid having someone mistype an email address. It’s not just the domain part that’s in consideration here, they need to ensure that typos don’t happen on the left hand side as well. I’d argue that typos on the LHS to different are a bigger problem than the occasional hit to a spamtrap as they’re forwarding PII to the address. laura On 26 May 2022, at 10:21, Ken O'Driscoll via mailop mailto:mailop@mailop.org>> wrote: Hi Omid, If you are specifically looking to reduce domain related typos on user input, then you can use a project such asTypofinder<https://github.com/nccgroup/typofinder>. They also have a commercial offering. Alternatively, you could also look at implementing an address validation services. Most will do the same thing (and more) but will already have it wrapped up in an API for you to call. Validation can be a sketchy industry, EmailHippo<https://www.emailhippo.com/> and Kickbox<https://kickbox.com/> are examples of two legitimate players. Ken. From: mailop mailto:mailop-boun...@mailop.org>> On Behalf Of Omid Majdi via mailop Sent: Wednesday 25 May 2022 20:00 To: mailop_at_mailop.org_o...@duck.com<mailto:mailop_at_mailop.org_o...@duck.com> mailto:mailop@mailop.org>> Subject: [mailop] Help with identifying invalid email domains Hey all, I'm looking to see if anyone has compiled any lists of invalid email domains? Examples of such would be typo domains and/or domains that accept all local-part addresses such as gmai.com<http://gmai.com/>, gmail.co<http://gmail.co/>, googlemai.com<http://googlemai.com/>, or proton.com<http://proton.com/>. If there's any resources someone could share for known invalid domains that would be incredibly helpful. Thanks, Omid Majdi Product Lead DuckDuckGo, Inc. ___ mailop mailing list mailop@mailop.org<mailto:mailop@mailop.org> https://list.mailop.org/listinfo/mailop -- The Delivery Experts Laura Atkins Word to the Wise la...@wordtothewise.com<mailto:la...@wordtothewise.com> Email Delivery Blog: http://wordtothewise.com/blog ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
Given that DuckDuckGo is in the business of forwarding email, they MUST use confirmed opt-in to avoid having someone mistype an email address. It’s not just the domain part that’s in consideration here, they need to ensure that typos don’t happen on the left hand side as well. I’d argue that typos on the LHS to different are a bigger problem than the occasional hit to a spamtrap as they’re forwarding PII to the address. laura > On 26 May 2022, at 10:21, Ken O'Driscoll via mailop wrote: > > Hi Omid, > > If you are specifically looking to reduce domain related typos on user input, > then you can use a project such asTypofinder > <https://github.com/nccgroup/typofinder>. They also have a commercial > offering. > > Alternatively, you could also look at implementing an address validation > services. Most will do the same thing (and more) but will already have it > wrapped up in an API for you to call. Validation can be a sketchy industry, > EmailHippo <https://www.emailhippo.com/> and Kickbox <https://kickbox.com/> > are examples of two legitimate players. > > Ken. > > From: mailop mailto:mailop-boun...@mailop.org>> > On Behalf Of Omid Majdi via mailop > Sent: Wednesday 25 May 2022 20:00 > To: mailop_at_mailop.org_o...@duck.com > <mailto:mailop_at_mailop.org_o...@duck.com> <mailto:mailop@mailop.org>> > Subject: [mailop] Help with identifying invalid email domains > > Hey all, > > I'm looking to see if anyone has compiled any lists of invalid email domains? > Examples of such would be typo domains and/or domains that accept all > local-part addresses such as gmai.com <http://gmai.com/>, gmail.co > <http://gmail.co/>, googlemai.com <http://googlemai.com/>, or proton.com > <http://proton.com/>. If there's any resources someone could share for known > invalid domains that would be incredibly helpful. > > Thanks, > Omid Majdi > Product Lead > DuckDuckGo, Inc. > ___ > mailop mailing list > mailop@mailop.org <mailto:mailop@mailop.org> > https://list.mailop.org/listinfo/mailop > <https://list.mailop.org/listinfo/mailop> -- The Delivery Experts Laura Atkins Word to the Wise la...@wordtothewise.com Email Delivery Blog: http://wordtothewise.com/blog ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
Hi Omid, If you are specifically looking to reduce domain related typos on user input, then you can use a project such as Typofinder<https://github.com/nccgroup/typofinder>. They also have a commercial offering. Alternatively, you could also look at implementing an address validation services. Most will do the same thing (and more) but will already have it wrapped up in an API for you to call. Validation can be a sketchy industry, EmailHippo<https://www.emailhippo.com/> and Kickbox<https://kickbox.com/> are examples of two legitimate players. Ken. From: mailop On Behalf Of Omid Majdi via mailop Sent: Wednesday 25 May 2022 20:00 To: mailop_at_mailop.org_o...@duck.com Subject: [mailop] Help with identifying invalid email domains Hey all, I'm looking to see if anyone has compiled any lists of invalid email domains? Examples of such would be typo domains and/or domains that accept all local-part addresses such as gmai.com, gmail.co, googlemai.com, or proton.com. If there's any resources someone could share for known invalid domains that would be incredibly helpful. Thanks, Omid Majdi Product Lead DuckDuckGo, Inc. ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
On Wed, May 25, 2022 at 03:00:19PM -0400, Omid Majdi via mailop wrote: > Examples of such would be typo domains and/or domains that accept all > local-part addresses such as gmai.com, gmail.co, googlemai.com, or > proton.com. If there's any resources someone could share for known > invalid domains that would be incredibly helpful. I believe Omid is looking for a list of look-alike domains also known as typosquatting domains. I too would be interested in similar resource. Specifically, I've been looking for something which I can look up a domain name and return to me if it is likely to be a look-alike domain and what domain the real brand owner is likely to be. I've not found such a general resource. However, there are several programs out there that will take a domain name and generate a ton of permutations, including puny coded IDNs that look exactly like or graphically very similar to the original domain in question. For example https://github.com/elceef/dnstwist Omid, you could create a list of popular email services (gmail.com, hotmail.com, protonmail.com...etc) and run them through dnstwist. dnstwist will also tell you which ones are currently registered. Michael Grant signature.asc Description: PGP signature ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
It appears that Omid Majdi via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >Hey all, > >I'm looking to see if anyone has compiled any lists of invalid email domains? Since you seem to have a different understanding of "invalid" from the rest of us, perhaps you could back up a step and explain what problem you are trying to solve. R's, John ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
On Wed, May 25, 2022 at 03:00:19PM -0400, Omid Majdi via mailop wrote: > Hey all, > > I'm looking to see if anyone has compiled any lists of invalid email domains? > Examples of such would be typo domains and/or domains that accept all > local-part addresses such as gmai.com, gmail.co, googlemai.com, or > proton.com. If there's any resources someone could share for known invalid > domains that would be incredibly helpful. You're looking to identify spamtraps. Don't expect much help from this audience :-D -- Atro Tossavainen, Chairman of the Board Infinite Mho Oy, Helsinki, Finland tel. +358-44-5000 600, http://www.infinitemho.fi/ ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
Re: [mailop] Help with identifying invalid email domains
On 2022-05-25 at 15:00:19 UTC-0400 (Wed, 25 May 2022 15:00:19 -0400) Omid Majdi via mailop is rumored to have said: > Hey all, > > I'm looking to see if anyone has compiled any lists of invalid email domains? A valid email domain is a domain that can be resolved (via MX and/or A and ) records to a working mail exchanger for that domain. Defining "invalid" is apparently subjective, if your request is indicative... In my view, the only way to tell that a domain is "invalid" is if it doesn't resolve or if DNS leads one to a bogus IP address for an MX: e.g. RFC1918, loopback, test-net, etc. > Examples of such would be typo domains One man's "typo domain" is another man's "I had this name first!" domain. > and/or domains that accept all local-part addresses There is NOTHING objectively "invalid" about that. It's not something most mail systems should do for most domains in the modern world but I know many people who are still using "catchall" domains happily. > such as gmai.com, gmail.co, googlemai.com, or proton.com. If there's any > resources someone could share for known invalid domains that would be > incredibly helpful. Given that you seem to want a list of domains that fit your extremely personal concept of "invalidity" I do not expect that anyone has any list that you would find useful. If you invent a set of criteria for "invalid" domains from thin air, you will likely need to identify such domains yourself. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
[mailop] Help with identifying invalid email domains
Hey all, I'm looking to see if anyone has compiled any lists of invalid email domains? Examples of such would be typo domains and/or domains that accept all local-part addresses such as gmai.com, gmail.co, googlemai.com, or proton.com. If there's any resources someone could share for known invalid domains that would be incredibly helpful. Thanks, Omid Majdi Product Lead DuckDuckGo, Inc. ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
