yahoorequests[.]com

PhishDestroy identifies yahoorequests.com as a high-risk fake login phishing page designed to steal Yahoo account credentials. The domain mimics official Yahoo pages in an attempt to trick users into entering their usernames and passwords, which are then harvested by attackers. Once compromised, victims face unauthorized access to email accounts, potential exposure of sensitive communications, and increased risk of account takeover across other services that share the same password. The site’s social-engineering tactics exploit user trust in recognizable brand names to maximize successful credential theft. This domain was flagged by 18 of 95 VirusTotal security vendors and is listed on two blocklists, including Google Safe Browsing’s SOCIAL_ENGINEERING category. It was registered through Dynadot LLC on April 5, 2026, and resolves to IP address 80.94.92.24. The site uses a valid Let’s Encrypt SSL certificate to appear legitimate, but this does not guarantee safety—phishing sites routinely obtain SSL certificates to deceive users. The recent domain creation date is especially suspicious as attackers often register new domains just days before launching campaigns to evade detection by reputation-based filters. If you visited yahoorequests.com do not enter any information. Immediately change your Yahoo password using the official login portal at login.yahoo.com and enable two-factor authentication. Scan your device with updated antivirus software to detect any malware that may have been installed. Report the domain to PhishDestroy and avoid interacting with any future links purporting to be from Yahoo. Always verify URLs carefully—legitimate Yahoo domains end in yahoo.com or yahoo.co.jp, not third-party domains. When in doubt, access accounts directly via the official website or app rather than clicking embedded links.