[GNC] From Reddit: gnucash.net is a malicious site

[gnucash at 4forl1st5.slmail.me]

On Sunday, April 19th, 2026 at 08:33, Liz <edodd at billiau.net> wrote:
>
> On Sat, 18 Apr 2026 21:43:17 -0400
> Paul Kroitor <paul at kroitor.ca> wrote:
> 
> > Saw this on Reddit and thought it should be reported here too.
> >
> > https://www.reddit.com/r/GnuCash/s/vCbDcXqprS
> >
> >
>  
> Interesting.
> They are many emails to one of the lists suggesting we get gnucash.*.cn
> and I just remove them from the moderation queue.
> 
> I saw one suggestion in the reddit thread that "the devs" should have
> already bought up all the other US domain names, but that sort of
> action would be never ending.
> 
> Liz
> with Moderator Hat

although it doesn't help instill confidence in the "real" domain, when
mail from the lists, received at a ProtonMail mailbox, often gets flagged
with a

 "This email has failed its domain's authentication requirements. It may be spoofed or improperly forwarded"

by Proton's SimpleLogin aliasing front-end, as seen in a recent email from
the devel list

 "This email failed anti-phishing checks when it was received by SimpleLogin, be careful with its content."


Plus I have recently been "probed" (ooh-err!) by the list's bounce
counter, presumably because too much mail, from the list, to the 
alias I use for GnuCash, but which ends up at a ProtonMail mailbox, 
has been bouncing, for long enough to trip some alarm level, before
it all settles down again.

Now, I know that it will settle down again, however, it might get
some people worrying.