Hey, noticed that when you click on the report button on an abuse contact that doesnt have an email, since phish.report cant keep track on if you actually reported or not it sends a post request telling phish.report to put a new ui to say “email reported to service”. However if you use the network dev tool and click edit and resend you can edit this request to say whatever you want and end up with things like this.
True, but I’m not sure why you’d want to? You could just use devtools to edit the page if you wanted custom text there
I guess thats true but couldnt someone just spam send with a lot of data in the provider field