I'm an independent cyber security researcher i have found multiple issues in your website.
Vulnerability : Missing SPF
I am just looking at your SPF records then found following. SPF Records missing safe check which can allow me to send mail and phish easily any victim.
PoC:
<?php
$to = "VICTIM@example.com";
$subject = "Password Change";
$txt = "Change your password by visiting here - LINK HEREl";
Hi,
I'm an independent cyber security researcher i have found multiple issues in your website.
Vulnerability : Missing SPF
I am just looking at your SPF records then found following. SPF Records missing safe check which can allow me to send mail and phish easily any victim.
PoC:
<?php
$to = "VICTIM@example.com";
$subject = "Password Change";
$txt = "Change your password by visiting here - LINK HEREl";
$headers = "From: https://www.alidropstore.com/";
mail($to,$subject,$txt,$headers);
?>
v=spf1 +ip4:202.221.179.0/24 ~all
Checking to see if there is a valid SPF record.
Found v=spf1 record for osdn.net: v=spf1 +ip4:202.221.179.0/24 ~all
Fix:
v=spf1 +ip4:202.221.179.0/24 -all
Checking to see if there is a valid SPF record.
Found v=spf1 record for osdn.net: v=spf1 +ip4:202.221.179.0/24 -all
You can refer this https://www.digitalocean.com/community/tutorials/how-to-use-an-spf-record-to-prevent-spoofing-improve-e-mail-reliability
Let me know if any further info is required. Regards. Found More bugs on your website reply me so that i may disclose them further.