account-yandex[.]net

Account-yandex.net presents an elevated risk as a credential phishing domain, specifically designed to steal login credentials by impersonating Yandex's email service. The domain's title, 'Почта Яндекс 360 — бесплатная электронная почта: регистрация, вход, создание почтового ящика,' closely mimics the legitimate Yandex Mail interface, tricking users into entering their usernames and passwords. This threat is particularly dangerous because it targets users seeking email services, potentially compromising personal and professional accounts.

According to intelligence data, account-yandex.net resolves to the IP address 2a02:6b8::ec and uses a Let's Encrypt / E8 SSL certificate to appear legitimate. VirusTotal analysis shows that 6 out of 95 security vendors flag this domain as malicious, indicating moderate but concerning detection. The domain was registered through NiceNIC International Group Co., Limited, a registrar known for being abused by threat actors, and was created on February 21, 2026, showing it is a relatively new threat. Currently, the domain is offline and appears on 1 security blocklist, but it may resurface under different domains.

To protect against this credential phishing threat, users should never enter their credentials on account-yandex.net or similar suspicious domains. Always verify the URL by checking for the official Yandex domain (e.g., yandex.com or mail.yandex.com) and ensure the connection is secure. Enable multi-factor authentication on all accounts to add an extra layer of security. If you have already entered credentials, change your passwords immediately and monitor your accounts for unauthorized access. Report the domain to security authorities or your organization's IT team to help block further attacks.