# Phishing sites impersonating Yearn PhishDestroy has recorded 49 phishing domains impersonating Yearn since 2025-08-07, 1 of them in the last 30 days. The most used registrars are NiceNIC and NameCheap; the most common TLDs are .com and .xyz. Open Yearn only from its official app or a saved bookmark. 49Domains, all time 1Last 30 days 20Online at last check 6Confirmed takedowns ## New domains in the last 90 days Yearn phishing domains detected per day: 6 from 2026-07-25 to 2026-10-22; peak 1. ## How to tell a fake Yearn site Words most often added to the brand in reported domains: finance, api, connect, wailet, learn, earn, ardenfinance, agnifinance, ethanafinance, bridge. - Type the address yourself or use a bookmark; phishing links for Yearn arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Yearn will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Yearn phishing domains The 49 most recently detected domains impersonating Yearn Domain | First detected | Status at last check | Registrar | [agnifinance.xyz](https://phishdestroy.io/domain/agnifinance.xyz/) | 2026-09-29 | Unknown | NICENIC | [worldsecurecurrencyearnings.net](https://phishdestroy.io/domain/worldsecurecurrencyearnings.net/) | 2026-09-20 | Online | PublicDomainRegistry.com | [arcfinance.space](https://phishdestroy.io/domain/arcfinance.space/) | 2026-09-04 | Offline | NameCheap | [verdanfinance.com](https://phishdestroy.io/domain/verdanfinance.com/) | 2026-08-19 | Online | NameSilo | [jimothy.earn-token.fun](https://phishdestroy.io/domain/jimothy.earn-token.fun/) | 2026-07-30 | Online | NICENIC | [learn.1stclasslax.com](https://phishdestroy.io/domain/learn.1stclasslax.com/) | 2026-07-27 | Online | GoDaddy.com | [garden-finance-swap.com](https://phishdestroy.io/domain/garden-finance-swap.com/) | 2026-07-08 | Online | UnstoppableUS2 | [voting-yearn.xyz](https://phishdestroy.io/domain/voting-yearn.xyz/) | 2026-06-15 | Online | PublicDomainRegistry.com | [etarn.ai-cryptolist.com](https://phishdestroy.io/domain/etarn.ai-cryptolist.com/) | 2026-06-15 | Online | Key-Systems | [tearn-bridge.wixstudio.com](https://phishdestroy.io/domain/tearn-bridge.wixstudio.com/) | 2026-06-10 | Online | Wix Studio | [aero-finance.top](https://phishdestroy.io/domain/aero-finance.top/) | 2026-05-25 | Offline | NAMECHEAP | [aero-finance.lat](https://phishdestroy.io/domain/aero-finance.lat/) | 2026-05-25 | Offline | NAMECHEAP | [poly.earn68.com](https://phishdestroy.io/domain/poly.earn68.com/) | 2026-05-06 | Taken down | Global Domain | [ardenfinance.app](https://phishdestroy.io/domain/ardenfinance.app/) | 2026-04-30 | Online | Porkbun | [ardenfinance.io](https://phishdestroy.io/domain/ardenfinance.io/) | 2026-04-30 | Online | Porkbun | [ardenfinance.xyz](https://phishdestroy.io/domain/ardenfinance.xyz/) | 2026-04-29 | Online | HOSTINGER operations | [saturnfinance.fun](https://phishdestroy.io/domain/saturnfinance.fun/) | 2026-04-18 | Offline | PublicDomainRegistry.com | [learn-live.wixstudio.com](https://phishdestroy.io/domain/learn-live.wixstudio.com/) | 2026-04-04 | Online | Wix Studio | [learn-bridge.wixstudio.com](https://phishdestroy.io/domain/learn-bridge.wixstudio.com/) | 2026-04-04 | Online | Wix Studio | [openfinance.to](https://phishdestroy.io/domain/openfinance.to/) | 2026-04-04 | Online | NAMECHEAP | [earn-masafinance.pages.dev](https://phishdestroy.io/domain/earn-masafinance.pages.dev/) | 2026-03-28 | Offline | Cloudflare | [vote-yearn.xyz](https://phishdestroy.io/domain/vote-yearn.xyz/) | 2026-03-13 | Offline | PublicDomainRegistry.com | [mayanfinance.pages.dev](https://phishdestroy.io/domain/mayanfinance.pages.dev/) | 2026-02-27 | Online | Cloudflare | [yala-finance.network](https://phishdestroy.io/domain/yala-finance.network/) | 2026-02-26 | Offline | — | [yearn.fi-wailet-api-connect-v2.com](https://phishdestroy.io/domain/yearn.fi-wailet-api-connect-v2.com/) | 2026-02-26 | Offline | — | [yearn.fi-wailet-connect-api-v3.com](https://phishdestroy.io/domain/yearn.fi-wailet-connect-api-v3.com/) | 2026-02-26 | Offline | — | [yearn-2026.com](https://phishdestroy.io/domain/yearn-2026.com/) | 2026-02-26 | Taken down | Tucows Domains | [v3-yearn.org](https://phishdestroy.io/domain/v3-yearn.org/) | 2026-02-26 | Unknown | NICENIC | [xn--r-7sbo6bq.xn--flrvult-5fg5bc1hwa8d4mc4535ihag.vault-s1.eu.com](https://phishdestroy.io/domain/xn--r-7sbo6bq.xn--flrvult-5fg5bc1hwa8d4mc4535ihag.vault-s1.eu.com/) | 2026-02-26 | Offline | Instra | [claim-yeifinance.xyz](https://phishdestroy.io/domain/claim-yeifinance.xyz/) | 2026-02-26 | Taken down | Web Commerce Communications | [yearn.fi-wailet-api-v2-connect.com](https://phishdestroy.io/domain/yearn.fi-wailet-api-v2-connect.com/) | 2026-02-26 | Offline | — | [yearn.fi-vaults-portfolio.com](https://phishdestroy.io/domain/yearn.fi-vaults-portfolio.com/) | 2026-02-26 | Offline | MAT BAO | [yearn.fi-home.org](https://phishdestroy.io/domain/yearn.fi-home.org/) | 2026-02-26 | Unknown | NiceNIC | [learn.platformdocs.org](https://phishdestroy.io/domain/learn.platformdocs.org/) | 2026-02-26 | Offline | NameCheap | [yearn.fi-connects-wailet-v3-api.com](https://phishdestroy.io/domain/yearn.fi-connects-wailet-v3-api.com/) | 2026-02-26 | Offline | — | [yearn.fi-wallet-api-v3-connect.com](https://phishdestroy.io/domain/yearn.fi-wallet-api-v3-connect.com/) | 2026-02-26 | Offline | — | [ethanafinance.com](https://phishdestroy.io/domain/ethanafinance.com/) | 2026-02-13 | Online | NiceNIC | [ethanafinance.net](https://phishdestroy.io/domain/ethanafinance.net/) | 2026-02-13 | Unknown | NiceNIC | [earnndrop.xyz](https://phishdestroy.io/domain/earnndrop.xyz/) | 2026-02-13 | Online | NiceNIC | [earrndrop.xyz](https://phishdestroy.io/domain/earrndrop.xyz/) | 2026-02-13 | Offline | NiceNIC | [earnr.xyz](https://phishdestroy.io/domain/earnr.xyz/) | 2026-02-05 | Taken down | NameCheap | [v3-yearn.cc](https://phishdestroy.io/domain/v3-yearn.cc/) | 2026-01-25 | Offline | NiceNIC | [evaa-finance.com](https://phishdestroy.io/domain/evaa-finance.com/) | 2026-01-24 | Taken down | Dominet (HK) | [earnn.cfd](https://phishdestroy.io/domain/earnn.cfd/) | 2025-12-14 | Offline | Global Domain | [ybribe.com](https://phishdestroy.io/domain/ybribe.com/) | 2025-11-16 | Offline | NameCheap | [beefy-earns-finance-yield-optimizer.com](https://phishdestroy.io/domain/beefy-earns-finance-yield-optimizer.com/) | 2025-10-11 | Unknown | NiceNIC | [ansofinance.net](https://phishdestroy.io/domain/ansofinance.net/) | 2025-09-17 | Offline | OwnRegistrar | [agnifinance.live](https://phishdestroy.io/domain/agnifinance.live/) | 2025-08-25 | Offline | Web Commerce Communications dba WebNic.c | [247de.xyz](https://phishdestroy.io/domain/247de.xyz/) | 2025-08-07 | Taken down | Cosmotown | [All 49 Yearn reports](https://phishdestroy.io/domain/?brand=Yearn) ## Where they are registered and hosted ### Registrars - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)7 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)4 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)4 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)3 - Wix Studio3 - [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)2 - Cloudflare2 - [Porkbun](https://phishdestroy.io/registrar/porkbun/)2 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)20 - [.xyz](https://phishdestroy.io/tld/xyz/)9 - [.net](https://phishdestroy.io/tld/net/)3 - [.org](https://phishdestroy.io/tld/org/)3 - [.dev](https://phishdestroy.io/tld/dev/)2 - [.fun](https://phishdestroy.io/tld/fun/)2 - [.live](https://phishdestroy.io/tld/live/)1 - [.cfd](https://phishdestroy.io/tld/cfd/)1 ### Hosting networks - Cloudflare, Inc.18 - CLOUDFLARENET, US13 - CLOUDFLARENET - Cloudflare, Inc., US2 - Google LLC2 - NEWDHAKAHARDWARE-AS-AP NEW DHAKA HARDWARE, BD1 - AMAZON-02, US1 - AMAZON-02 - Amazon.com, Inc., US1 - swissnetwork02 Global-Data System IT Corporation1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Yearn; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/yearn/