Operator sign-in
2FA is emailed only to the authorized operator. Session is an HttpOnly cookie (8 hours). The token is not stored in the browser.
Inboxes—
Messages—
Users—
Findings—
Process
Outbound / inbound
Hygiene
Passwords, VT keys, SMTP secrets, session tokens, and restore secrets are never sent to this page. Message bodies stay off the list — only sender / subject / preview.
| Loading… |
| Address | Owner | Plan | TTL | ||
|---|---|---|---|---|---|
| Loading… | |||||
Messages
Subjects, senders, and a short preview. Full bodies and secrets stay off this screen.
| From | Subject | When |
|---|
| User | Plan | Credits | Inboxes | ||
|---|---|---|---|---|---|
| Loading… | |||||
Live inbox updates
These settings apply to every visitor. Faster polling uses more VPS CPU. WebSocket is the cheap path; poll is only a backup.
IP jail
Rate-limit policy is unchanged. You can only release an already-jailed address.
| IP | Remaining | |
|---|---|---|
| None jailed | ||
| When | Action | Detail | IP |
|---|---|---|---|
| Loading… | |||