# Domain Name

# RFC 1035 Check

This check ensures that the domain portion of the email address follows the syntax rules defined by RFC 1035, which specifies valid domain name formats. It verifies that the domain contains allowed characters (letters, digits, hyphens), no leading or trailing hyphens, and labels separated by dots without empty segments. This prevents obviously malformed or invalid domains from passing further validation.

Here are some examples of emails which will fail this check:

Email Reason
user@-example.com Leading hyphen
user@example-.com Trailing hyphen
user@exa_mple.com Underscore not allowed
user@.example.com Leading dot
user@example..com Empty label

This check influences the fraud score as follows:

Rule Fraud Score
domain.no_domain +100
domain.invalid_domain +100

# Domain MX Record Check

This check confirms that the email's domain has valid Mail Exchange (MX) records configured in DNS, proving it can actually receive email. Without MX records, a domain cannot accept messages, which is a strong indicator that the address is fake or misconfigured. By performing a DNS lookup, the system verifies the presence of at least one MX record before allowing the email to proceed.

Here are some examples of emails which will fail this check:

Email Reason
user@nonexistentdomain.xyz Domain does not exist
user@noemailserver.com Domain exists but no MX records
user@invalid.example Invalid TLD with no DNS resolution
user@localhost Not resolvable in public DNS
user@fake-domain.test Test domain without mail servers

This check influences the fraud score as follows:

Rule Fraud Score
domain.no_mx +10

# Domain Age Check

This check evaluates how long the email's domain has existed by querying WHOIS registration data. Domains registered less than 7 days ago are marked as suspicious, as fresh domains are often created for abuse or spam campaigns. Additionally, expired or inactive domains are flagged since they typically cannot receive email reliably and may be repurposed for fraudulent use.

Here are some examples of emails which will fail this check:

Email Reason
user@brandnewdomain.com Registered 2 days ago
user@recently-created.net Registered 5 days ago
user@expired-domain.org Domain registration lapsed
user@newsignup.co Registered 1 day ago
user@oldbutexpired.com Recently expired and inactive

This check influences the fraud score as follows:

Rule Description Fraud Score
domain.whois_error error while getting whois data +10
domain.unregisted domain is not registered +10
domain.expired domain is expired +10
domain.fresh domain is less than 7 days old +5