learn-live[.]wixstudio[.]com

PhishDestroy identifies learn-live.wixstudio.com as a live Yearn brand impersonation site designed to harvest user credentials and sensitive financial data through fake investment dashboards and tutorials. The domain mimics Yearn’s branding to deceive visitors into entering wallet addresses, private keys, or recovery phrases under the guise of learning to use Yearn’s DeFi protocols. Traffic is redirected through Wix’s hosting infrastructure, which adds a false veneer of legitimacy, making it harder for users to recognize the deception. This site does not host legitimate Yearn content and is actively promoted through phishing campaigns targeting DeFi users.

This domain was flagged as a brand impersonation threat and remains under investigation. Evidence includes its resolution to IP address 34.144.206.118, which hosts multiple suspicious domains. Notably, the site uses a Let’s Encrypt SSL certificate to appear secure, but it has evaded detection with 0 out of 95 VirusTotal scans flagging it as malicious. While the creation date and registrar details are not provided in the available data, this site is hosted on WixStudio, a platform commonly abused by threat actors to rapidly deploy fraudulent pages. It has not been widely blocked yet, increasing the risk to unsuspecting users.

Users who visited learn-live.wixstudio.com should immediately disconnect from the site, avoid entering any credentials or wallet information, and scan their devices for malware using reputable security software. If any sensitive data was entered, revoke exposed wallet credentials immediately and report the incident to Yearn’s official support channels. Do not interact with any prompts or download files from this domain. Use ad blockers and DNS filtering tools to block access to this site in the future. Always verify URLs by visiting Yearn’s official website directly and never rely on links from unsolicited messages or ads.