Skip to content
Spaw
Get your API key

2026-10-07

Brave Email Aliases and eight more alias domains answer as relays

Brave Email Aliases, Sign in with Apple's new private.icloud.com domain, ExpressMailGuard and six more alias domains of Addy.io, SimpleLogin and Proton Pass now answer is_relay true, and mailer.me addresses are no longer reported as disposable.

  • Brave Email Aliases are relays. An address at bravealias.com, where the Email Aliases built into the Brave browser are issued, answers is_relay true with relay_service "Brave Email Aliases", domain_category relay and the 5-point relay weight. It used to answer is_relay false and domain_category other. The servers that receive Brave's alias mail accept every address at the domain, so a Brave alias still typically answers risky with reason catch_all: the mailbox handshake cannot tell a live alias from a made-up one.
  • Sign in with Apple's new relay domain is flagged before the switch. Apple said in August 2026 that new Sign in with Apple addresses will be issued on private.icloud.com from later this year. Addresses there answer like those at privaterelay.appleid.com, with relay_service "Sign in with Apple private relay". The flag belongs to that exact name, so ordinary icloud.com addresses are unchanged.
  • ExpressMailGuard is a relay. clivaro.io, a shared alias domain of ExpressVPN's ExpressMailGuard, answers with relay_service "ExpressMailGuard", and so do the dedicated subdomains the service hands out under it.
  • More alias domains of services Spaw already knew. mailer.me and addymail.com answer as Addy.io, silomails.com and slmails.com as SimpleLogin, and passmail.com and pass2mail.com as Proton Pass.
  • mailer.me addresses are no longer disposable. mailer.me is on the open burner list Spaw syncs every week, so an Addy.io alias there could answer disposable, with the 80-point weight and no mailbox check. A relay is never disposable, so these addresses are now checked and scored like any other relay.
  • A sending policy that blocks relays now blocks these addresses too. The default policy does not block the relay signal.
  • Lookups already logged were relabelled, so the email statistics count these addresses as relays. The verdict and score each lookup was answered and billed with are unchanged. The forwarding-services dataset version is 2026-10-07.

markdown version: /changelog/2026-10-07-brave-email-aliases-and-eight-more-alias-domains-answer-as-relays.md · atom feed: /changelog.atom

All releases