Goal

Detect when a user is using a disposable email address.

Strategy

Monitor user email address in login events and detects whenever the domain is known to provide a disposable email service.

Triage and response

Investigate the activity of the user with ID {{@usr.id}} to determine if this is a throwaway account exploited to misuse your services.