[REGEX ISSUE] False Positives while email enumeration about archivefuzz HOT 4 CLOSED

I would use a whitelist rather than blacklist for domains. There is a list of all valid tlds here: http://data.iana.org/TLD/tlds-alpha-by-domain.txt

from archivefuzz.

Well after thinking on this , it is not possible to blacklist/whitelist all the invalid-words/TLDs .

from archivefuzz.

There exists a python library called validate_email which has 3 levels of email validation, including asking a valid SMTP server if the email address is valid (without sending an email).

So, it may be a time-consuming task. But, if someone wants he can use it. It will check for MX records.

You can also make dynamic blacklist (for future use) for each domain whose MX record isn't available.

from archivefuzz.

@rohitcoder can't use that, as Time is the constraint, so am thinking of creating a whitelist, Currently working on it

Thanks

from archivefuzz.