That's funny, but it still doesn't stop me from feeding you a fake redirection to a legitimate email, which is what you should actually worry about. If you want to enforce a dystopian level of authenticity on your users, you should make a whitelist, not a blacklist. Coincidentally, you'd also be losing my patronage, but I suppose that's the cost of "progress" in web development.