Peneira Disposable Email Blocker

Peneira Disposable Email Blocker rejects throwaway email addresses everywhere a visitor can submit one:

• WordPress registration, login, profile email change, and password reset
• The native comment form
• Contact Form 7, WooCommerce, Gravity Forms, WPForms, Forminator, Ninja Forms, and Fluent Forms (each loaded only when active)

The block list and a companion allowlist come from the open-source amieiro/disposable-email-domains project. Domains are stored in indexed database tables and imported without PHP timeouts. The bundled list works out of the box with no external requests. Optionally, enable automatic list updates (off by default) on a schedule you choose (daily/weekly/biweekly/monthly), or refresh on demand from the settings page. Subdomains of blocked domains are also blocked; an allowlist (upstream plus your own) prevents false positives.

External services

This plugin connects to the GitHub REST API (api.github.com) to download the disposable-domain block list and allowlist from the amieiro/disposable-email-domains repository.

• What is sent: a standard HTTPS GET request (and a conditional-request ETag header). No personal data, site data, or user data is transmitted.
• When: only when you click “Check for updates now”, or on your chosen schedule after you enable automatic list updates (a setting that is off by default). No requests are made otherwise; the plugin is fully functional with the bundled lists.
• Endpoints: https://api.github.com/repos/amieiro/disposable-email-domains/contents/denyDomains.txt , …/allowDomains.txt

GitHub’s terms: https://docs.github.com/site-policy/github-terms/github-terms-of-service
GitHub’s privacy statement: https://docs.github.com/site-policy/privacy-policies/github-privacy-statement