Legal Robot: Email spoofing possible via Legal Robot domain

ID H1:163475
Type hackerone
Reporter swapnil755
Modified 2017-01-21T06:38:29


Dear Team,

There are few email spoofing tools available on for free and one of them is When i tried to send an email from to my mail, it was successful and straight away delivered into my inbox but when i tried to send it from another mail id,, i did not receive any mail.

Hence there might be some configuration missing in your mail servers (i am not much aware of technical details associated with this issue but would love to know how this is happening)

This can be dangerous, as attacker can send some fake mails with any fake promotional mails and ask for account details or it can be anything.This thing can also lead to reputation loss.

PFA screenshots of mail delivered to my account.Please feel free if you need any further help.

Thanks & Regards,

Swapnil Kothawade.