split from
viewtopic.php?f=11&t=90185 where the domain name yahaa.xyz is used for sending a fraudulent message.
The domain name yahaa.xyz is spoofing Yahoo. There is no content, the fraudulent domain name is used only for the email address.
From the domain name registration:
Domain name: YAHAA.XYZ
Updated Date: 2021-03-06
Creation Date: 2021-03-01 Registrar Registration Expiration Date: 2022-03-01
Registrar: Registrar of domain names REG.RU LLC
Status: ok
Registry Registrant ID: reg-g9e9o8j3p1ry
Registrant Name: Ivan Petrov
Registrant Organization: Private Person
Registrant Street: Lenina,4,26
Registrant City: Omsk
Registrant State/Province: --
Registrant Postal Code: 644000
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email:
parliament55555@yandex.ruSimilar messages are sent from yanda.rest - spoofing Yandex.
From the domain name registration:
Domain name: YANDA.REST
Updated Date: 2021-02-14
Creation Date: 2020-10-25 Registrar Registration Expiration Date: 2021-10-25
Registrar: Registrar of domain names REG.RU LLC
Status: ok
Registry Registrant ID: reg-vsckzn11fg4t
Registrant Name: Ivan Petrov
Registrant Organization: Private Person
Registrant Street: Lenina,4,26
Registrant City: Omsk
Registrant State/Province: --
Registrant Postal Code: 644000
Registrant Country: RU
Registrant Phone: +7.9278714194
Registrant Email:
parliament55555@yandex.ruOther active fraudulent domain name registered with the same registrant email address:
- enail.xyz, spoofing mail.com, as seen in
https://scamsurvivors.com/forum/viewtop ... 52#p232030- gnnail.xyz, spoofing gmail.com - as seen in
viewtopic.php?f=11&t=89813#p231831- nneil.xyz, spoofing mail.com
- qamail.rest, spoofing gmail.com
- qmail.rest, spoofing gmail.com, as seen in:
https://scamsurvivors.com/forum/viewtop ... 11&t=86835- qpmail.rest, spoofing gmail.com
- yahaa.rest, spoofing yahoo.com
- yanbex.xyz, spoofing yandex.com, as seen in
viewtopic.php?f=11&t=83558- yandasky.site, spoofing yandex.com, as seen in
viewtopic.php?f=11&t=73502&p=226143#p226143- yandax.rest, spoofing yandex.com, as seen in
viewtopic.php?f=11&t=87233- yandax.space, spoofing yandex.com, as seen in
viewtopic.php?f=11&t=87032&p=223931#p223931- yandax.xyz, spoofing yandex.com, as seen in
viewtopic.php?f=11&t=88314.