[gituliar]

Exactly the same attack happened with me about a month ago, also with expired domain name and recovery email associated with it. Fortunately I also had an active phone number assigned, which I believe ruined hacker’s attempt.

Funny facts:

- the domain was registered at the same date as attack happened

- attack happened from Hamburg IP and Android phone. This data was in my reset email from FB. This was true when I stopped using FB 5+ years ago.

- domain registration costs money, hence success rate of such attacks should be rather high

- since I stopped renewing this domain, it was registered by one more entity. According to archive.org with just some ads.

Take care folks, remember about your expired domains.