Is disroot.org a Disposable Email? 2026 Risk & Blocklist Report

What is disroot.org?

Disroot is a privacy-focused free email provider run by a non-profit. Its anonymity makes it a moderate fraud vector.

Why disroot.org matters for fraud

Legitimate provider, but aliasing and easy signup make it a vector for multi-accounting when not normalized.

How to validate disroot.org in your app

const res = await fetch('https://verishield-edge-api.p.rapidapi.com/v1/verify?email=user@disroot.org', {
  headers: { 'X-RapidAPI-Key': process.env.RAPIDAPI_KEY }
});
const report = await res.json();
if (report.fraud_risk.recommendation === 'BLOCK') {
  // reject signup from @disroot.org
}

import httpx
report = httpx.get('https://verishield-edge-api.p.rapidapi.com/v1/verify', params={'email': 'user@disroot.org'},
                 headers={'X-RapidAPI-Key': KEY}).json()
if report['fraud_risk']['recommendation'] == 'BLOCK':
    raise ValueError('Blocked domain: disroot.org')

How VeriShield Edge detects it

• ✓Disposable blocklist match across thousands of throwaway domains
• ✓MX, SPF and DMARC posture inspection via DNS-over-HTTPS
• ✓Live RDAP domain-age and registrar intelligence
• ✓Shannon entropy analysis of the username for bot detection
• ✓Datacenter / VPN ASN reputation on the signup IP
• ✓Canonical Gmail normalization to collapse alias variants

Frequently asked questions