IntelliMail: The Smart Email Validation Service

Inspiration

We’ve all used temporary email services at some point—whether for privacy, testing, or avoiding spam. But what happens when those same disposable emails are used for fraud, fake accounts, or abuse? We built IntelliMail to help businesses detect and prevent email-based abuse while still respecting legitimate privacy needs.

What It Does

IntelliMail is a multi-layered email validation API that checks for:

  • Disposable/temporary email domains
  • Invalid or misconfigured DNS records
  • Suspicious patterns (e.g., auto-generated emails)
  • Domain reputation & age
  • SMTP server responsiveness
    ...and more.

It returns a risk score instead of just a "block/allow" decision, letting businesses customize their fraud prevention strategy.

How I Built It

  • Backend: AWS Lambda (Node.js) for serverless, scalable validation logic.
  • Database: DynamoDB for storing disposable domains with TTL auto-cleanup.
  • Automation: EventBridge schedules daily updates to keep domain lists fresh.
  • API Layer: API Gateway + CloudFront for low-latency global access.
  • Frontend: A simple html/js demo hosted on S3.

Challenges I Ran Into

  • False Positives – Early versions flagged legitimate privacy services (e.g., ProtonMail). We fixed this with allow lists and reputation scoring.
  • Rate Limits – WHOIS/DNS lookups got blocked. Solution: Caching + retry logic.
  • Speed vs. Accuracy – SMTP checks were slow. Now they’re optional for low-risk emails.

Accomplishments I'm Proud Of

  • 10+ Validation Checks – Far more thorough than basic regex or disposable domain lists.
  • <500ms Response Time – Optimized parallel processing in Lambda.
  • Ethical Design – Doesn’t outright block privacy tools, just flags risk.
  • Fully Serverless – Zero infrastructure management, scales automatically.

What We Learned

  • Serverless ≠ Effortless – Cold starts and concurrency limits require tuning.
  • Fraud Detection is Nuanced – Not all disposable emails are malicious, and not all malicious emails are disposable.
  • Caching is Critical – Reduced DNS/SMTP checks by 80% with smart caching.

What’s Next for IntelliMail

  • Machine Learning – Predict new disposable domains before they’re widely used.
  • Webhook Support – Real-time alerts for high-risk signups.
  • Enhanced Analytics – Detect patterns in fraudulent activity over time.
  • Mobile SDK – Easier integration for app developers.

IntelliMail isn’t about blocking privacy—it’s about stopping abuse while keeping the internet open and secure.

Built With

  • api-gateway
  • aws-lambda
  • aws-sam
  • cloudflare-dns
  • cloudfront
  • cloudwatch
  • dynamodb
  • eventbridge
  • github-actions
  • html5
  • javascrip
  • node.js
  • react.js
  • whois
Share this project:

Updates