ENS developer @nicksdjohnson lifts the veil on a phishing scam that hid behind genuine‑looking Google alerts 🔍🔐 • OAuth quirk produced signed emails. • Fake Google-styled portal harvested passwords and data. • Google reportedly pledges a fix following the complaint.