38
HELP : Is support@protonme.zendesk <mailto:support@protonme.zendesk> a legitimate Proton address or a potential phishing attempt? (lemmy.ml)
submitted 4 months ago by to c/protonprivacy@lemmy.world
20 comments fedilink hide all child comments
 

Peace be with you, Proton Community, 🌹

I was trying to find out which search engine Lumo uses in the background. To do this, I used the official contact form here: https://proton.me/support/contact?topic=lumo.

Unfortunately, I later realized that the official site lists "protonmail.zendesk", not "protonme.zendesk". The domain "protonme.zendesk" looks suspicious, and many sites online report it as a phishing attempt.

I have already taken security precautions on my end, but I want to be absolutely sure before I report this domain as malicious. Has anyone else seen this? Please let me know if you think this is phishing. And i hope you can answer my question about the search engine 😁

Thanks for the help.

UPDATE 30.06.2026: The domain is real! I checked it with a new account and another Wi-Fi connection. It's not a "phishing attack", so I am happy.

But Kagi makes me nervous. I only just found out that they uses Google. So I don't understand why the Proton support team said "There is no Google connection". Maybe Kagi doesn't use Google anymore. I don't know. Whatever.

Thanks to everyone who wrote back, and sorry if I wasted your time. But I didn't want to publish false information on my website about Lumo's web search. Thanks again.

And by the way, Lumo just got an update where it can generate images.

you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 4 months ago (3 children)

It's legitimate.

Proton hasn't updated their official phishing advice page with the new domain, buuuuuuuuuuuuuuut you can see them suggesting someone contact them on the protonme.zendesk.com domain on their official App Store page (under the "the app changes fonts on internal website" review), and on their official Google Play Store page (has to be set to the turkish language in that URL otherwise the review they're responding to doesn't show up)

Unless BOTH accounts that manage their app distribution on both the Google Play AND Apple App Store were quietly compromised (and never found out), and used to post just a handful of replies to reviews with a phishing domain, I think it's safe to say it's legit and they just forgot to add it to their list of non-phishing domains yet.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 6 points 4 months ago (2 children)

    Proton hasn't updated their official phishing advice page with the new domain, buuuuuuuuuuuuuuut you can see them suggesting someone contact them on the protonme.zendesk.com domain on their official App Store page (under the "the app changes fonts on internal website" review), and on their official Google Play Store page (has to be set to the turkish language in that URL otherwise the review they're responding to doesn't show up)

    This doesn’t exactly raise green flags.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 4 months ago (1 child)

    As I said, unless their official app distribution accounts were both compromised without anyone ever finding out and raising the alarm, and used to spread just a couple fairly hard to normally find instances of that URL, I think it's a lot more likely they just.... forgot to add it.

    The alternative is much less likely: that someone specifically targeted this user with a message that knew exactly what they put in Proton's official contact form on their official domain, but chose not to ask for any information and just provided an answer to the question and then left.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •