Agreed, I thought it was going to be something automated, but 250 accounts in 7 hours seems pretty manual. That does make it harder to stop.

* 2025-06-09 first user account created, verified, 2FA set up, API Token provisioned

* 2025-06-11 46 more user accounts created over the course of 3 hours

* 2025-06-24 207 more user accounts created over the course of 4 hours

I do run https://bademails.org , powered by the same disposable-email-domains project, and I'll be the first to say that it only cuts out the laziest of attempts. Anyone even slightly serious has cheap alternatives (25 to 100+ accounts for $1 on popular email hosts).

Yep, and if a human is doing that, it's easy to switch over to a different email provider, until that gets banned too, then another, until you can't do anything without a gmail address anymore.