The Problem

If you've ever tried to use a disposable email service on Instagram,

TikTok, or Netflix — you know the pain. They get rejected instantly

because platforms maintain blacklists of known fake domains.

I kept hitting this wall while testing registration flows for my

own projects. So I built the solution myself.

The Idea

Instead of fake domains, use real, active Microsoft accounts

as a temporary inbox pool. Assign them to users on demand, let

them receive the verification code, then reclaim the address.

Simple concept. Surprisingly tricky to execute at scale.

Tech Stack

Backend: Python / Flask

Database: MySQL (PyMySQL)

Email access: Microsoft Graph API (OAuth2 + refresh tokens)

Auth: bcrypt + session-based for web, API key for REST

Payments: NowPayments (crypto)

Rate limiting: flask-limiter

The Hard Part — Microsoft Graph API

Getting inbox access via Graph API is straightforward for a single

account.…