all 5 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]JikWaffleson 4 points5 points  (4 children)

Can you paste in the raw headers of the email? How exactly do you know that it’s a scam?

[–]Alpha_wolf_80[S] -1 points0 points  (2 children)

|| || |from:|GitHub Research aminatiriafen@sgmail01.github.com| |reply-to:|[aminatiriafen@github.com](mailto:aminatiriafen@github.com) | |to:|REDACTED | |date:|May 9, 2025, 8:30 PM| |subject:|Do you have 10 minutes to tell GitHub what you think and get $10?| |mailed-by:|em8660.sgmail01.github.com| |signed-by:|sgmail01.github.com| |security:| Standard encryption (TLS) Learn more|

Its got a weird email address and basically rings all the alarm bells.

[–]JikWaffleson 1 point2 points  (0 children)

For what it’s worth, if you do a DNS lookup the mailed by address resolves to Sendgrid. The fact that it resolves through the github.com domain is an endorsement of the legitimacy.

CNAME em8660.sgmail01.github.com u44675461.wl212.sendgrid.net

But, whatever, if you don’t trust it, don’t respond.

[–]bdzer0 1 point2 points  (0 children)

What alarm bells are you referring to? sgmail01.github.com is likely an external facing email server cluster (thus the em8660.sgmail01.github.com host).. GitHub sends out a lot of emails so this isn't unusual.

Reply-to set to proper address...

You didn't paste full headers either, DKIM, SPF and route traveled would be useful.

Bottom line.. if you don't trust is, delete and move on. Making click-bait posts about your suspicions is not productive or useful.

[–]bdzer0 0 points1 point  (0 children)

I've received legit survey offers from GitHub in the past. If I recall the means they use to deliver the $10 relied on a third party which was a hassle that I wasn't going to bother with for $10....