Earlier quoted context omitted.
Don’t want to sound like I’m victim blaming the author. But I can tell you exactly the issue with their account: registering with an email on a self hosted .xyz domain. Using sketchy tld’s is just asking for this kind of trouble. https://news.ycombinator.com/item?id=28554400
"Sketchy tld"? Even google's parent company uses it for its corporate website.
xyz has been accomodating to scammers ever since its inception. After a decade I think we can say that it is on purpose.