The attacks have stopped so we've turned this off for now. It will be quickly re-enabled with an updated list if the attacks start again.

Legitimate users occasionally use disposable email domains for throwaway accounts. Unfortunately, we've been forced to block using a subset of these domains lacking basic anti-abuse mechanisms. Domains for anonymous email aliases with anti-abuse mechanisms such as addy, SimpleLogin and Proton aliases will not be blocked as part of the blanket blocklist. We'll handle those alias domains separately as needed.

Our forum is being targeted with an extreme level of raiding with hundreds of accounts created every few days to direct abuse towards both community members and moderators. These accounts are being manually created and used to raid the forum so we can't prevent it with mechanisms for blocking bots such as captchas.

We're currently using a list containing around 75k disposable email domains lacking anti-abuse mechanisms. It comes with a list of around 30 additional domains with at least basic anti-abuse mechanisms which are not currently being blocked and will be handled on a case-by-case basis.

We're going to be adding additional defenses against raids and spam to the forum. Flarum v2 is currently in a release candidate stage and should have a stable release soon which has massive improvements to both Flarum and many of the extensions for it including several anti-spam / anti-abuse ones we use.