Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

underproofed ganbold@ganbold (2026-10-01 13:18:44)
I received a phising email from my own no-reply address????? where is the leak, what is the vuln???????

and the authentication button lead to a deployed version of this html https://github.com/ablxogaz/gldbch/blob/main/glendagskiu.html

the hell
---Reply---
🦉@aaa@tinyap.izkluxcvy.foo (2026-10-01 13:36:28)
without SPF or DKIM, From field in an email can be spoofed.
isn't that the issue?

---Replies---

underproofed ganbold@ganbold (2026-10-01 13:55:08)
ah makes sense!

I just migrated my email to different provider. I don't remember having SPF or DKIM documentation set on their side, so I just drop any previous config unrelated to the new service.

I'll check later, thank you!