Nextcloud · Report #385037
Missing SPF flags for customerupdates.nextcloud.com
Validstatus
mediumseverity
6upvotes
1 Mar 2020disclosed
How it was found
Hey,
I just checked for SPF records for the customerupdates.nextcloud.com domain, and there are none. The fake message reaches the inbox from this domain. Not spam.
You can validate by testing yourself here: http://www.kitterman.com/spf/validate.html
This subdomain too: update.nextcloud.com
Impact
Attacker could send fake email.