Live worker hosted at https://spamchannel.haxxx.workers.dev
As of writing, This allows you to spoof emails from any of the +2 Million domains using MailChannels. It also gives you a slightly higher chance of landing a spoofed emails from any domain that doesn't have an SPF & DMARC due to ARC adoption.
It was released at the Defcon 31 talk SpamChannel: Spoofing Emails From 2 Million+ Domains and Virtually Becoming Satan.
TL;DR set your Domain Lockdown Record ASAP.
- Signup and create a free account on Cloudflare (https://dash.cloudflare.com/sign-up)
- Clone this repo
- Install Wrangler CLI tool (
npm i -g wrangler
) - Run
wrangler login
and login to your account - In the root of this repo run
wrangler publish
Code was based on @ihsangan's gist.