yumifinance[.]framer[.]ai

This domain, yumifinance.framer.ai, is a phishing site designed to impersonate a financial brand, likely targeting users seeking crypto or finance services. The threat is brand impersonation combined with credential theft, where victims may unwittingly enter sensitive login details or financial information, believing they are on a legitimate site. The site used a generic Framer template with the title "My Framer Site," indicating it was quickly set up without genuine content.

PhishDestroy identified this threat through multiple indicators. VirusTotal shows that 3 out of 95 security vendors flagged the domain as malicious. The site was registered through CSC Corporate Domains, Inc., a legitimate registrar, but the SSL certificate from Let's Encrypt suggests a low-cost, rapid deployment typical of phishing operations. The domain resolves to IP address 31.43.160.6 and appears on at least three security blocklists. Although currently offline, its activity underscores the risk of brand impersonation campaigns.

If you visited yumifinance.framer.ai, immediately change any passwords or credentials you may have entered. Enable two-factor authentication on your accounts and monitor for unusual activity. Report the domain to your email provider and security tools to prevent future access. Stay vigilant against similar phishing attempts that use generic templates and urgent financial themes.