Hi yall, I have been receiving these email for a while now. The email address is no-reply@notify.proton.me but I’m pretty sure this is a phishing attack because not the first email (the one in blue) or the second account name (the one in red) are my proton account.
Someone knows these 2 gmail accounts and knows I have a proton one but doesn’t know the correct proton account name. Ofc my proton account is not linked these emails, not even for recovery situations.
Just heads up, this was not easy to spot.
It could also be some IDN tricks. Most browsers translate mixed scripts into punycode nowadays, but it can be easy to get tricked. Just go to their official site if you’re unsure.
For example: www.prοtοn.me/ looks like a normal link… but the O’s have been replaced with the Greek letter omicron.
Interesting. I am blind and therefore use the TalkBack screen reader and it does not say the O’s because they are not in English. It reads that as PRTN.
this is really insightful, thanks!