Unverified50% confidenceFactExact time
Users arbitrage the reciprocal credit mechanism by bulk-creating temporary mailboxes to receive verification codes and password reset emails in order to accumulate inbound credits.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/21/2026
First Seen
Valid until: 12/20/2026
Sources
Related Entities
Related Claims
UnverifiedAfter impersonating a login and performing operations, lifecycle emails triggered by user behavior may be actually sent to the user's inbox79% similarUnverified邮件转发中Received字段记录每一跳服务器信息，Return-Path字段存储退信地址，X-Forwarded-To等扩展头字段可能暴露真实收件人75% similarUnverified临时邮箱服务的运作方式是服务商维护若干公开域名，用户无需注册即可生成随机地址接收邮件，邮件在数分钟到数小时后自动销毁75% similarUnverifiedThe exposure of username-to-email address mappings can be used for cross-platform credential stuffing attacks, particularly against users who reuse the same password.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/939664API
curl https://kongchang.com/api/v1/knowledge/claims/939664MCP
get_claim(id=939664)