I use live corporate email. A few years ago I registered domains and put templates of a fake company on them.
I register an email and instead of the first and last name, I indicate the position of the cardholder.
There is no point in buying old mail, but you can do it to check the antifraud reaction. In any case, it's a little better than freshly registered mail.
In order to bypass antifraud, you need mail with which the cardholder has already successfully paid for purchases.
Freshly registered mail will earn you a few risk points, but if you otherwise don't have any leaks, then maybe everything will work out.
In stores that sell gift cards, antifraud is very strong. To get started, you can try some new stores that sell digital goods.