Disposable Email Detector (auth/disposable-email.ts)

Checks an email address domain against a curated blocklist of common disposable/temp-mail providers to deter free-trial abuse during signup verification.

// Source: https://github.com/every-app/open-seo | License: MIT | Copyright 2026 Ben Senescu
// Provided via justclaw.it.com; keep this notice with the code.
// A curated blocklist of the highest-volume disposable / throwaway email
// providers. The free plan grants real credit spend off nothing but a verified
// email, so the cheapest way to farm it is a temp-inbox service that can still
// receive the verification link. Blocking the busiest of those raises the cost
// of mass signups without touching legitimate users.
//
// This is deliberately a small, zero-dependency list — it is not exhaustive.
// For comprehensive coverage, swap this for the `disposable-email-domains`
// package or a captcha on signup (see the PR notes).
const DISPOSABLE_EMAIL_DOMAINS = new Set<string>([
  "0clock.ne

... (truncated -- full source via MCP)