False Positive: Please remove atomicmail.io from disposable list (leg…#1
Open
radiykharisov wants to merge 1 commit intoMuellerConstantin:masterfrom
Open
False Positive: Please remove atomicmail.io from disposable list (leg…#1radiykharisov wants to merge 1 commit intoMuellerConstantin:masterfrom
radiykharisov wants to merge 1 commit intoMuellerConstantin:masterfrom
Conversation
…itimate permanent email service) Hello, I'm the Product Manager at Atomic Mail (atomicmail.io). It looks like our domain got caught up in your disposable email blocklist, and I’m hoping to get it removed (and ideally added to allowlist.conf). To give some context: we are a standard, permanent encrypted email provider, not a throwaway mail service. Recently, we were targeted by a coordinated bot attack trying to mass-register accounts. It’s highly likely your automated scrapers (or a user report) caught this spike and flagged our domain. We’ve shut that down. Here is how we actively prevent abuse on our platform: We enforce strict rate limits on account creation and auth attempts per IP, along with a mandatory CAPTCHA during registration. We have hard limits on outbound email volume per account to prevent spam runs. We use continuously trained Bayesian models for inbound/outbound filtering (with additional AI-based filtering rolling out soon). Full implementation of DKIM, SPF, and DMARC. Our Trust & Safety team actively reviews abuse reports and manually bans violators based on our strict zero-tolerance policy: https://atomicmail.io/privacy-policy. We operate in strict compliance with GDPR requirements, ensuring robust data privacy and proper account deletion procedures for all our users. For external validation, I’ve attached a screenshot from Palo Alto Networks URL Filtering confirming our domain holds a clean, 'Low-Risk' Web-based-Email reputation. Having our domain on this list is currently blocking our real users from registering on third-party sites. Let me know if you need any server logs or further info from my side to verify this. Thanks for your time and for maintaining this list!
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hello,
I'm the Product Manager at Atomic Mail (atomicmail.io). It looks like our domain got caught up in your disposable email blocklist, and I’m hoping to get it removed.
To give some context: we are a standard, permanent encrypted email provider, not a throwaway mail service. Recently, we were targeted by a coordinated bot attack trying to mass-register accounts. It’s highly likely your automated scrapers (or a user report) caught this spike and flagged our domain.
We’ve shut that down. Here is how we actively prevent abuse on our platform:
For external validation, I’ve attached a screenshot from Palo Alto Networks URL Filtering confirming our domain holds a clean, 'Low-Risk' Web-based-Email reputation.
Having our domain on this list is currently blocking our real users from registering on third-party sites. Let me know if you need any server logs or further info from my side to verify this.
Thanks for your time and for maintaining this list!
