Phishing sites impersonating Yahoo

PhishDestroy has recorded 64 phishing domains impersonating Yahoo since 2025-09-06, 15 of them in the last 30 days. The most used registrars are Dynadot and CSC Corporate Domains; the most common TLDs are .com and .app. The official Yahoo domain is yahoo.com: any other site asking for your login or wallet is not Yahoo.

64
Domains, all time
15
Last 30 days
30
Online at last check
15
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 12026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 12026-08-12: 02026-08-13: 12026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 22026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 12026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 12026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 22026-09-05: 02026-09-06: 22026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 12026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 12026-10-08: 02026-10-09: 12026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 42026-10-16: 12026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 82026-10-22: 0
Yahoo phishing domains detected per day: 27 from 2026-07-25 to 2026-10-22; peak 8.

How to tell a fake Yahoo site

Official domain: yahoo.com.

Words most often added to the brand in reported domains: wbeuvipfx, weeblysite, service, sitebeat, crazydomains, signin, bafybeifoqx, cecgwyuti, fmxrvkx, veb.

  • Type the address yourself or use a bookmark; phishing links for Yahoo arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Yahoo does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Yahoo phishing domains

The 50 most recently detected domains impersonating Yahoo
DomainFirst detectedStatus at last checkRegistrar
wbeuvipfx6.com2026-10-21OnlineDynadot
wbeuvipfx91.com2026-10-21OnlineDynadot
wbeuvipfx57.com2026-10-21OnlineDynadot
wbeuvipfx35.com2026-10-21OnlineDynadot
wbeuvipfx26.com2026-10-21OnlineDynadot
wbeuvipfx59.com2026-10-21OnlineDynadot
wbeuvipfx18.com2026-10-21OnlineDynadot
wbeuvipfx53.com2026-10-21OnlineDynadot
tanqiubasports-yahoo.com.cn2026-10-16Online广东时代互联科技有限公司
qiumenghui-yahoo.com.cn2026-10-15Online广东时代互联科技有限公司
qmh-yahoo.com.cn2026-10-15Online广东时代互联科技有限公司
larosecleaner-yahoo.com2026-10-15OnlineRegistrar.eu
daydreamsonpaper.com2026-10-15OnlineLaunchpad.com
rb88-yahoo.com.cn2026-10-09Online广东时代互联科技有限公司
alexstewartinternationalltd.rw2026-10-07OnlineSKYLINE DIGITAL
ff.alwayssecuredhub.net2026-09-19OnlineNameCheap
emeraldcoalition.org2026-09-06OnlineeNom
loginprodxattnetcommogingate.weebly.com2026-09-06OnlineSquare
electura.net2026-09-04OnlineENOM
wenaxe.com2026-09-04OnlineBluehost
first-lifecycle-316758.framer.app2026-08-31OfflineFramer
musical-pothos-6925f8.netlify.app2026-08-22OfflineNetlify
maryboogen.github.io2026-08-17OfflineGitHub
answers.quantarchive.com2026-08-17OnlineNAMECHEAP
lambent-marzipan-07d722.netlify.app2026-08-13OfflineNetlify
yahoomailoilna.github.io2026-08-11OfflineGitHub
pub-b778210b76e7433886ec399564e5d4a5.r2.dev2026-08-02OnlineCloudflare
usersscentre.github.io2026-07-24OfflineGitHub
service1011.weebly.com2026-07-12OfflineMarkMonitor
yahoolmailweb.weebly.com2026-06-23OfflineMarkMonitor
coincheckusa.icu2026-06-18OfflineGname.com
yahoo302.blogspot.com2026-06-15OnlineGoogle Blogger
cuddly-wealth-365306.framer.app2026-05-12OfflineFramer
oginnigideon18-tech.github.io2026-05-04Taken downGitHub
yahoo-service-108844-102825.weeblysite.com2026-04-19Taken downMarkMonitor
yahoojkj.github.io2026-04-03OfflineGitHub
esskaycoating1.pages.dev2026-04-01OnlineCloudflare
litere.uvt.ro2026-03-27OnlineNetprotect
kao.dinline.store2026-03-17OfflineHiChina (www.net.cn)
artsy-taxonomy-582688.framer.app2026-03-12OfflineFramer
bigboss.lumos.best2026-03-11OfflineOVH
jnlfsnblfnblge.weebly.com2026-03-08OfflineSafenames
jbchkchdbc.weebly.com2026-03-07OfflineSafenames
spicy-property-066101.framer.app2026-03-05OfflineFramer
ancient-selfies-799617.framer.app2026-03-05OfflineFramer
sbcglobal-8b5cf0.webflow.io2026-02-27OfflineMarkMonitor
defi-llama.net2026-02-26OfflineDynadot
claims-floki.pages.dev2026-02-26OnlineCloudflare
emailhomeyahoo-195006.weeblysite.com2026-02-03Taken downSafenames
jhddce.weebly.com2026-01-27Taken downSquarespace Domains II

All 64 Yahoo reports

Where they are registered and hosted

Registrars

  1. Dynadot9
  2. CSC Corporate Domains5
  3. GitHub5
  4. Safenames4
  5. Framer4
  6. 广东时代互联科技有限公司4
  7. Cloudflare3
  8. MarkMonitor3

Top-level domains

  1. .com25
  2. .app12
  3. .io6
  4. .cn4
  5. .net3
  6. .dev3
  7. .sh2
  8. .website1

Hosting networks

  1. AMAZON-02, US6
  2. SpectraIP B.V.6
  3. WEEBLY - Weebly, Inc., US5
  4. Amazon.com, Inc.5
  5. Fastly, Inc.5
  6. CLOUDFLARENET - Cloudflare, Inc., US4
  7. AMAZON-02 - Amazon.com, Inc., US4
  8. Cloudflare, Inc.4

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Yahoo; share of all PhishDestroy reports: 0.03%.