REAL disconcerning email from GoDaddy (1.Viewing)

Headers are real, address is real, everything about this email is real

EXCEPT...

I did not contact GoDaddy support and apparently I was talking to an agent.

All info in the actual headers (not publishing for obvious reasons) are correct and legitimate godaddy

Interesting case. Let’s suppose the email is actually real.

Was it sent by mistake, or is someone trying to exploit the system?

leonid said:

Let’s suppose the email is actually real.

Click to expand...

I don't have to suppose, every address in the header is @godaddy.com, it's as real as it gets.

I have been analyzing headers for years and this one is legit.

Someone was social engineering and contacted GoDaddy about your account or a domain held there, so to confirm your identity a Verification Code was sent. They probably used every excuse in the book, like being on vacation, lost my phone, was robbed, in jail, can't remember my password, etc.

Some 3rd world scammer be trying to steal your account or domains.

There are scammer hives in Africa and Southeast Asia full of thousands of people doing this shit 24/7. It's a very scary digital world out there.

I wonder what happens if someone accesses that email and then requests the code?

The code expires in 10 minutes and obviously whoever was doing the support probably got the wrong account and got no response to the code so I figure I'm not going to be too worried about it.

MapleDots said:

The code expires in 10 minutes and obviously whoever was doing the support probably got the wrong account and got no response to the code so I figure I'm not going to be too worried about it.

Click to expand...

What happens is that the scammer attempts all the tricks on the book, so in order to cut the call short, the Support CSR sends a verification code to the registered email, either to confirm their BS story or just to get rid of them. These scumbags hang up fast after that and all the customer has left is a mysterious Verification Code email.

I got a notification from WHC one time, where a guy was trying to convince then to transfer a domain of mine to them, as they were the 'real owners' and I was just holding it for them. So I got a Code, inquired what it was for and shut that scam down fast. People are trying all kinds of shit, all day long.

And the odds are extremely minute that the GD rep sent the email to the wrong account, although in truth, it was the wrong account. LOL

And you're right, it's nothing to worry about as these scammer hives are trying social engineer millions of accounts a day, so odds are we'll all be hit.

I get these from time to time. It always gives me an uneasy feeling.

However, when I inquired about it my rep told me it was normally related to someone contacting support and being confused about a domain they own.

It can happen even more if you are actively buying expired domains.

Brad

DataCube said:

However, when I inquired about it my rep told me it was normally related to someone contacting support and being confused about a domain they own.

Click to expand...

LOL, yeah they're really confused...

The reps don't want to tell you the truth, that some scammer from Morocco tried to social engineer access to your account and steal all your domains. No, they're just 'confused' about which domains in your account they might or might not own.

There are definitely people who are legit confused. We buy expired domains here so we can't be too surprised when a relatively recent acquisition gets those kind of messages.

rlm said:

There are definitely people who are legit confused. We buy expired domains here so we can't be too surprised when a relatively recent acquisition gets those kind of messages.

Click to expand...

I think it was probably the previous owner of Legend.ca thinking everything is at godaddy

https://dn.ca/topic/7455/