Welcome to SECApedia! Please check out our rules, manual of style aswell as some info on the site.


The site is currently in a "grace period" where only users can edit articles so that we can set things up in peace. This should end within a few days or so. Soyoyuki (talk) 14:22, 21 June 2026 (UTC)


CURRENT MISSION: Update, uncensor and (if needed) rewrite all the imported pages from SNCApedia.
Additionally, please remove all unnecessary discussion pages, for example those with outdated info.

Cock.li

From SECApedia
(Redirected from 420blaze.it)
Jump to navigationJump to search
cock.li
Email service
Founded2013
AreaOperated in Germany, servers in Romania
CreatorVincent Canfield
URLhttps://cock.li
Cock.li is a gem.
Do NOT use cock.li as your personal email (no shit sherlock). It's better for throwaways and private aliases.

cock.li is a gemmy[or however the fact is unchecked] privacy-oriented partially joke email service created by the supposedly pseudonymous 8caca named Vincent Canfield, cock.li offers a wide array of comedic domains to use for your email address (such as its flagship domain @cock.li and the infamous @nigge.rs) and a strict minimal logs policy.

It is notable for being used by many soyteens, the most notable of which being ROOT[lower-alpha 1] and other jannies until the soyjak.party mailserver (@soyjak.st) was created. According to the 4chan data leak, it was also used by 4chan jannies as well.

Privacy

Cock.li stands out for its privacy and ease of use. The only logs kept are IP addresses and registration data upon sign up, although this is most likely done to combat spammers. In order to prevent automated abuse of this; however, there is a proof-of-work challenge required to be done through the browser if you want to send email.[1] Despite its unprofessional nature, cock.li is apparently used by some federal agents as a way to stay protected. However, cock.li also responds accordingly to subpoenas[2] to stay afloat, so don't use it for services that link you back to a real identity.

Hiccups

2015 bombing threat incident

In the December of 2015, one of cock.li's server hard drives that was being used to host the service has been seized by the German law enforcements after the international request from the US, because of a bomb threat was sent to several school districts in the United States using the email "madbomber@cock.li". That meant that the SSL keys, private keys and full mail content of all 64,500 of cock.li's users, as well as hashed passwords, registration time, and the last seven days of logs were all confiscated and now are in the hands of German authorities.

Border incident

In 2017, Vincent Candfield, the founder and owner of cock.li, took a trip from Germany to the United States to visit family. He was then detained by the U.S. Customs and Border Protection, presumably because they were aware that he owned cock.li. His electronics were seized and attempted to be decrypted by the agents, though they likely failed. When he left the US, he was stopped again, and after they searched his device (they found porn, not very surprising) and let him go.[3]

After this incident, Vincent moved the servers to Romania, where a provider was more friendly to Tor.

DoD Subpoena

In July 2018, the Department of Defense subpoenaed Candfield after he had supposedly sent hateful comments to a Department of Defense employee.[2] He defended himself in court, but it's unknown if he won.

Hitler.rocks incident

In early 2025, Cock.li discovered that their hitler.rocks was being used as a destabilizer by federal agencies, mainly for spam and reducing cock.li's efficiency. Alongside with its removal, nigge.rs was re-added.[It just was, ok?]

Data breach

In 2025, Cock.li suffered a data breach due to a vulnerability in old Roundcube software used for the webmail client. Data such as language and login info (not passwords) were leaked, though it was relatively minor.[4]

Cock-mail

Cock-mail is cock.li's proprietary webmail user interface, created after the Roundcube databreach and developed in-house. It uses IMAP and SMTP over WebSockets and manages the entire session in your browser from start to finish. In order to circumvent XSS vulnerabilities, HTML is completely disabled and converted to plaintext. It can be self-hosted via an HTML file (for complete features, via Docker) but is mainly on the web.

Domains

Cock.li currently offers the following domains for their email addresses, ranging from professional-sounding to sexual references and 4chan memes:[5]

Notes

  1. rooty@420blaze.it, though it's currently inactive

Citations