Why did boxes disappear on domain mail in Yandex?

Question

Email

For some reason, all accounts registered on the domain disappeared. Passwords neither from the domain mail control panel nor from the domain control panel were transferred to anyone. There were no extraneous entries in the login log. The Yandex support service says that the mailboxes were deleted, sort of like from the domain mail administrator account, after which the domain got rid of the mail. However, there were no notifications from Yandex that the domain was disconnected or any other warnings were received (I checked the mail log in the admin mailbox). Later, Yandex put forward a version that a deputy administrator was created and allegedly he deleted all the mailboxes and unlinked the domain. However, to our request for any evidence that Yandex received requests to add a deputy administrator, Yandex replied that it did not have such records. If we assume that some attacker acted, who took possession of access to the domain mail admin box, then why didn’t notifications come from Yandex and why didn’t the attacker delete the administrator account itself and what goals did he generally pursue? If we assume that some actions were taken from the domain control panel, then why did only one domain suffer when there are several of them in the panel? Neither sites nor other domains were affected. Has anyone experienced this phenomenon before? In general, is it really possible to get any evidence from Yandex that they, in principle, dealt with this issue? (we looked at the server logs, etc.). Could there have been failures at Yandex itself, causing similar consequences? If you need more information to answer my question, please ask. Thanks who took possession of access to the admin mailbox of the domain mail, then why didn’t notifications come from Yandex and why didn’t the attacker delete the administrator account itself and what goals did he pursue? If we assume that some actions were taken from the domain control panel, then why did only one domain suffer when there are several of them in the panel? Neither sites nor other domains were affected. Has anyone experienced this phenomenon before? In general, is it really possible to get any evidence from Yandex that they, in principle, dealt with this issue? (we looked at the server logs, etc.). Could there have been failures at Yandex itself, causing similar consequences? If you need more information to answer my question, please ask. Thanks who took possession of access to the admin mailbox of the domain mail, then why didn’t notifications come from Yandex and why didn’t the attacker delete the administrator account itself and what goals did he pursue? If we assume that some actions were taken from the domain control panel, then why did only one domain suffer when there are several of them in the panel? Neither sites nor other domains were affected. Has anyone experienced this phenomenon before? In general, is it really possible to get any evidence from Yandex that they, in principle, dealt with this issue? (we looked at the server logs, etc.). Could there have been failures at Yandex itself, causing similar consequences? If you need more information to answer my question, please ask. Thanks then why didn’t notifications come from Yandex and why didn’t the attacker delete the administrator account itself and what goals did he pursue in general? If we assume that some actions were taken from the domain control panel, then why did only one domain suffer when there are several of them in the panel? Neither sites nor other domains were affected. Has anyone experienced this phenomenon before? In general, is it really possible to get any evidence from Yandex that they, in principle, dealt with this issue? (we looked at the server logs, etc.). Could there have been failures at Yandex itself, causing similar consequences? If you need more information to answer my question, please ask. Thanks then why didn’t notifications come from Yandex and why didn’t the attacker delete the administrator account itself and what goals did he pursue in general? If we assume that some actions were taken from the domain control panel, then why did only one domain suffer when there are several of them in the panel? Neither sites nor other domains were affected. Has anyone experienced this phenomenon before? In general, is it really possible to get any evidence from Yandex that they, in principle, dealt with this issue? (we looked at the server logs, etc.). Could there have been failures at Yandex itself, causing similar consequences? If you need more information to answer my question, please ask. Thanks then why only one domain suffered when there are several of them in the panel? Neither sites nor other domains were affected. Has anyone experienced this phenomenon before? In general, is it really possible to get any evidence from Yandex that they, in principle, dealt with this issue? (we looked at the server logs, etc.). Could there have been failures at Yandex itself, causing similar consequences? If you need more information to answer my question, please ask. Thanks then why only one domain was affected when there are several of them in the panel? Neither sites nor other domains were affected. Has anyone experienced this phenomenon before? In general, is it really possible to get any evidence from Yandex that they, in principle, dealt with this issue? (we looked at the server logs, etc.). Could there have been failures at Yandex itself, causing similar consequences? If you need more information to answer my question, please ask. Thanks causing such consequences? If you need more information to answer my question, please ask. Thanks causing such consequences? If you need more information to answer my question, please ask. Thanks

Answer 1

According to the text, the only conclusion is the "jamb" of Yandex, which they want to hide, otherwise they would have told the reason, because. All the logs - they definitely have.

Answer 2

By the way, this is about hosting mail on public services such as Yandex.PDD or Google for domains. In the case of jambs, you will never find the ends, especially on free options.

Answer 3

A similar situation. For two days, control over the DNS hosting was lost (registered to an individual, a former partner of the real owner of the domain).
The cname yamail-************ pointing to mail.yandex.ru has been removed. and mx entry.
A few hours after the changes (obviously more than ttl records), the linked domain with more than 200 mailboxes "disappeared" from https://pdd.yandex.ru/.
Those. support states that: "Domain *** is currently not connected to our service. Apparently, it has been disconnected from our service by the owner/administrator. Unfortunately, this can only be done if all emails on the domain have been deleted boxes."
I am 99% sure that except for me I did not have the opportunity to delete all mailboxes.
marann , in your case, the story ended with what?