Email domain

Is webhook.site a disposable email?

Yes. webhook.site appears in our disposable-email domain list. This is a domain-level signal, not proof that a particular person or mailbox is fraudulent.

Domain check Listed

webhook.site

  • Disposableyes
  • Free providerno
  • Receives mailyes
  • Mail servers2 found
  • SPFpublished
  • DMARCpublished
Risk score90
  • disposable_domainwebhook.site hands out throwaway inboxes.

DNS facts

Domain
webhook.site
MX records
in1-smtp.messagingengine.com, in2-smtp.messagingengine.com
SPF
v=spf1 include:_spf.google.com include:spf.messagingengine.com include:amazonses.com -all
DMARC
v=DMARC1; p=quarantine; pct=10; ruf=mailto:abuse@fredsted.me; rua=mailto:abuse@fredsted.me; adkim=r; aspf=r
Checked
2026-10-21

Check another address →

Block it in code

Stop webhook.site signups.

Check each new address and refuse when disposable is true. One call covers webhook.site, its sister domains and new throwaway brands.

curl https://veqen-app.com/v1/email/check \
  -H "Authorization: Bearer $VEQEN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "someone@webhook.site"}'
import os, requests

r = requests.post(
    "https://veqen-app.com/v1/email/check",
    headers={"Authorization": f"Bearer {os.environ['VEQEN_API_KEY']}"},
    json={"email": "someone@webhook.site"},
    timeout=10,
)
result = r.json()
print(result["risk"]["verdict"], result["risk"]["reasons"])
const res = await fetch("https://veqen-app.com/v1/email/check", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.VEQEN_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"email": "someone@webhook.site"}),
});
const result = await res.json();
console.log(result.risk.verdict, result.risk.reasons);
Questions

About webhook.site

Is webhook.site a disposable email domain?

Yes. webhook.site appears in our disposable-email domain list. This is a domain-level signal, not proof that a particular person or mailbox is fraudulent.

How do I block webhook.site at signup?

Check the domain of each new address. With the Veqen API, call /v1/email/check and refuse when disposable is true; that also covers webhook.site's sister domains and new ones.

Where does webhook.site email go?

Its mail is handled by in1-smtp.messagingengine.com, in2-smtp.messagingengine.com.

← More throwaway domains starting with W