salmon-embeds-139089[.]framer[.]app

This domain, salmon-embeds-139089.framer.app, is identified as a crypto drainer site designed to impersonate Yumi Finance, a fintech brand. Crypto drainers are malicious scripts that automatically transfer cryptocurrency from a victim's wallet to an attacker-controlled address without consent. The site mimics legitimate fintech landing pages, using persuasive design and urgent calls-to-action to trick users into connecting their wallets, often under the guise of exclusive offers or token airdrops. Once connected, the embedded malicious JavaScript executes unauthorized transactions, draining funds irreversibly. Users are typically lured through social media ads, fake partnerships, or phishing emails directing them to the fraudulent page. Analysis indicates this domain poses a significant threat based on multiple technical indicators. The domain is flagged by 3 out of 95 security vendors on VirusTotal, including blockchain security and anti-phishing platforms. It appears on three security blocklists, and its trust score is rated 0 out of 100 by Gridinsoft. The site was hosted on Framer, a legitimate website builder, but was taken offline following detection. It resolved to the IP address 31.43.160.6 and used a Let's Encrypt SSL certificate, which, while providing encryption, is commonly abused by threat actors due to its free and automated issuance. Technologies detected include Framer Sites, React, HSTS, and HTTP/3, suggesting a modern, responsive frontend designed to appear credible to potential victims. If you visited salmon-embeds-139089.framer.app or connected a wallet to any site claiming to be Yumi Finance, immediate action is required. First, disconnect the wallet from all dApps using your browser's wallet extension settings. Revoke any suspicious token approvals or smart contract interactions using a blockchain explorer or a revoke tool. Transfer remaining assets to a new, secure wallet that has never been connected to unknown sites. Monitor your transaction history for unauthorized transfers and report any losses to your wallet provider and relevant law enforcement or cybercrime reporting platforms. To prevent future incidents, enable transaction simulation and phishing detection features in your wallet software, and always verify domain authenticity through official brand channels before interacting with financial platforms.