HexBrain

Sifchain · Report #1187001

No valid SPF record found

N/Astatus
2upvotes
9 Dec 2021disclosed

How it was found

Email spoofing is possible

To verify: visit : https://www.kitterman.com/spf/validate.html and type your domain name to check SPF records you can see the results as: No valid SPF record found.

POC:

  1. visit: https://emkei.cz/
  2. fill the from email as [email protected] 3.To email as victim email address, enter subject, data and click send.
  3. you will receive the email in your inbox

Impact

Email spoofing

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original