Notice the link https://login.yahoo.com/account/change-password looks legit right but the actual link is https://yahoo.phlogin.com/account/?scrump=dmlwZXJ0ZWszQHlhaG9vLmNvbQ== and this website is a hacker scammer phishing site. Do not fall for this old trick in the book, it call social hacking or also known as fear hacking making you to get scared and need to recover your account by clicking on the link right away without thinking it’s a hacking website. On Tuesday, January 22, 2019, 1:48:05 AM EST, Yahoo [email protected] wrote: Yahoo Hi @yahoo.com, Someone on an unrecognized device attempted to sign in to your Yahoo account. This sign in attempt was made on: Device chrome mobile, android Where* Dandong, Liaoning, China 175.167.152.212 If this was you, you’re all set! Didn’t sign in recently? Review your account activity and reset your password immediatly. https://login.yahoo.com/account/change-password Thanks, Yahoo We will never ask you for your password in an email. If you don’t trust a link in an email, go directly to the normal sign in page via yahoo.com. *Location is approximate based on the IP address it originated from.