Verifymail.io lists all domains handled by forwardemail.net as unsafe/disposable

[junxit]

I found out today that https://verifymail.io/ lists all (at least all the ones I tried) domains that have ForwardEmail's MX servers configured in DNS as unsafe/disposable.

I have domains I bought a few months ago that use a different MX server that are listed as safe. Newer and older domains of mine that use ForwardEmail.net's MX servers are listed as unsafe.

Is there a way to contact them and get this resolved? My communication attempts have been unanswered so far (contact AT).

[junxit]

This has recently caused at least one service I signed up for to reject my account creation request until after I contacted their technical support to manually override the system, which took hours vs moments.

[CorsairVelo]

I moved a domain over to Forwardemail.net a couple weeks ago. I got a similar warning from verifymail.io that it is a privacy/alias email address.

_
From Verifymail.io here's what they say about a "privacy email address'':

> Many email providers are privacy-focused, which can include awesome features such as email forwarding or unlimited email alias. These features are great for their users, however can be a nightmare for administrators or moderators who can't distingish between a legitimate email address or a single-use email address. The "privacy" classification allows us to notify our clients when an email address is using an email provider with privacy features that could potentially be misused by malicious individuals. This classification does not mean that the email provider is "privacy-focused". Use this classification at your own discretion, since these types of emails can be used by both privacy-conscious visitors and bad actors.

I have a different custom domain with Simplelogin and it gets the same warning

My 3rd custom domain at Proton does not get this warning. When I put that address in, verifymail.io marks it "Privacy - False" and "safe". Not sure why Proton is "Privacy = false"

EDIT: adding this text from their site:
Based on our findings, we have deemed customdomain.com to be a temporary or disposable email provider. Website administrators should block this domain name from their website and prevent any account registrations using this domain name. This report has been based on verifymail.io's email verification API.

[titanism]

We have emailed the team there.

[titanism]

[CorsairVelo]

Any chance you can describe how Verifymail.io responded? At first glance nothing changed.

[titanism]

It's no longer classified as a disposable service and no longer suggests users to block the domain.

If you feel this is still defamatory of our service, please share your thoughts and feedback, and we will have our legal team formally take care of this.

[CorsairVelo]

I am not trying to escalate it, just trying to understand what they mean.

If I run my forwardemail.net domain in their page, it says "Disposable False" and "Privacy True" and the background color is orange (I presume as a sort of a warning color).

If I run a different domain I have at proton mail, I get full green and "Disposable False" and "Privacy False"

Why would that be? It's not on you to explain their logic, I undersand. I may pursue it with them. As far as I can tell , the privacy=true is not impacting my domain with fowrdwardemail, so I'm not losing sleep over it.

EDIT: rom verifmail.io
Many email providers are privacy-focused, which can include awesome features such as email forwarding or unlimited email alias. These features are great for their users, however can be a nightmare for administrators or moderators who can't distingish between a legitimate email address or a single-use email address. The "privacy" classification allows us to notify our clients when an email address is using an email provider with privacy features that could potentially be misused by malicious individuals. This classification does not mean that the email provider is "privacy-focused". Use this classification at your own discretion, since these types of emails can be used by both privacy-conscious visitors and bad actors.

Perhaps because Forwardemail.net allows forwarding basically anywhere is the differentiator, proton doesn't do that.

[titanism]

Please email contact@vpnapi.io @CorsairVelo with your feedback and request they change their policy. Let us know how they respond.

[CorsairVelo]

Thank you

[junxit]

So, they have 3 stages that I know of:

1. Red: means Disposable and Privacy
2. Yellow: means Privacy (unsure if they also have yellow meaning something else)
3. Green: means neither (the best score/rating, in their book)

Before May 17, 2025, they were showing all our domains as Red. I emailed them that day, and then on May 22, 2025, they replied saying now we're showing as Yellow following my request.

I filed this issue with the hopes of turning us to green, so thank you for re-opening the issue. While yellow is better than red, it certainly is not green.

It is odd they consider gmx.com and gmail.com not "privacy enabled", but our normal domains as "privacy enabled". Their criteria is not transparent, does not make sense (it should be domain-specific, not MX specific), and may be misleading their own customers while negatively affecting a lot of people such as myself.

[titanism]

Our legal team has sent a C&D to them and their registrar. We hope that they can resolve this confusion timely. Thank you all.

[CorsairVelo]

Agree with @junxit. Just to add a few things.

I have an old icloud account (icloud allows fowarding btw) and it is all green (privacy=false),
my Proton account is green (custom domain) so privacy = false so it is green
Forwardemail is labeled "privacy=true" as we know and is yellow/orange.

Their criteria certainly does not seem obvious.

[titanism]

Have any of you heard anything back from them in writing yet?