nick.eth was exposed to a high-imitation Google official phishing attack, warning users to beware of "legitimate domain name traps"

PANews reported on April 16 that ENS developer nick.eth posted a warning that it had recently suffered a highly simulated phishing attack, in which the attacker exploited a vulnerability in Google’s infrastructure to disguise itself as an official email and bypass DKIM verification, and the email was sent by the no-reply@google.com and was deemed secure by Gmail. The embedded link in the email points to a phishing page under the “google.com” subdomain, directing the user to a simulated login screen to steal credentials. nick.eth urges users to be vigilant and not to trust domain names.