[OP] here... There were no 2fa alerts or any record of anomalous logins, so it's unlikely the password was compromised. Even locking my domain from transfer w

[OP] here... There were no 2fa alerts or any record of anomalous logins, so it's unlikely the password was compromised. Even locking my domain from transfer wouldn't have stopped this from happening, the domain wasn't transferred: only the pointers to new DNS servers were changed. This really smells like GoDaddy has bad programmers that introduced bugs in their infrastructure, or hackers poking around their back-end triggering stored procedures. I'm not sure if it's 100% clear from the write up, but my domain was "seized" by GoDaddy's systems that host an insecure "Hosted by GoDaddy" welcome page. I didn't click on the "Buy This Domain" button, but it could have been spoofed to look like GoDaddy and actually taken me to some command and control server if this wasn't GoDaddy that performed the domain takeover. Recourse? I called GoDaddy support and they were 700% confident their systems are perfect. I was told by the first support rep "I'm writing this down as caused by customer", so I told him "Well I'm marking this in my system as caused by GoDaddy" as we both laughed. I called GoDaddy support a second time after I was partially convinced this was my fault and told them "Absolutely not, you guys messed up this needs to be escalated" as I gave the support representative a primer on the basics of how DNS works and why it broke for my domain (because he was clueless). Then emailed him a screenshot of my domain with "Parked by GoDaddy" written all over it because he didn't believe me. So my recourse here is getting called an idiot by barely conscious GoDaddy support staff, posting this on HN to share the experience and getting called out again as an idiot for using GoDaddy (this is my first issue with them in 20 years). This has been happening to random GoDaddy customers for 4+ years and GoDaddy is so full of themselves they won't even open a support ticket to consider it might be their fault. I have no recourse except to transfer my domains to a responsible registrar.