Always thought reading emails on expired domains would be unethical. This Shane Cultra guy ("Started advising dozens of companies in the domain space, defi, and crypto using my experience to help solve problems in emerging companies", LOL) brags about using it to hijack dormant social media accounts.. Nice. But why stop that short? Those same inboxes might often contain far more sensitive material like crypto exchanges or other financial logins (or even records to access enterprise systems). By his reasoning, all of that is just free game for whoever can configure a "catch-all"?
If hijacking dormant social accounts is fair play, then so are financial accounts? I see this opportunism turning into outright fraud pretty fast - thanks teacher.