Creating a new account via email you can enter an email such as mrrenter@fake

This should be checked for a .com/org/etc

Also once this account is created it is bricked as well. If you log out of it you cannot log back in because the server says its not a valid email address. There is still an entry in the table

Solution: Update the regex used for email validation