Gétur Fránsson@getur·May 26
@mikko @Safety I just played with that contact-x domain. it works with any Twitter username. I’m tempted to give it a dummy account credential just to see what it does with it.
A external domain captures credentials by mimicking the platform login interface.