coral-basis-767942[.]framer[.]app

This domain, coral-basis-767942.framer.app, operates as a crypto drainer designed to impersonate Yumi Finance, a legitimate decentralized finance platform. The site prompts visitors to connect their cryptocurrency wallets under false pretenses, such as claiming airdrops, staking rewards, or exclusive token distributions. Once connected, the malicious smart contract embedded in the site executes unauthorized transactions, draining funds from the victim's wallet without consent. Crypto drainers are particularly insidious because they exploit the irreversible nature of blockchain transactions, leaving victims with no recourse for recovery. The use of a well-known brand like Yumi Finance increases the likelihood of successful deception, especially among users familiar with the legitimate platform's offerings. Analysis indicates this infrastructure was purpose-built for fraudulent activity. The domain is hosted on Framer Sites, a platform that allows rapid deployment of web pages without extensive technical expertise, making it attractive for threat actors. It resolves to the IP address 31.43.161.6 and employs a Let's Encrypt SSL certificate, which provides HTTPS encryption but does not validate the legitimacy of the site's content. Security vendors on VirusTotal have flagged this domain, with 3 out of 95 engines detecting it as malicious. Additionally, the domain appears on three security blocklists and is actively blocked by wallet security tools and phishing detection systems. The page title explicitly mimics Yumi Finance, and the site uses modern web technologies such as React and HTTP/3, which can make it appear more credible to unsuspecting users. If you visited coral-basis-767942.framer.app and connected your wallet, immediate action is required to mitigate potential losses. First, disconnect your wallet from any suspicious sites using your wallet's interface or a trusted dApp browser. Next, revoke any unauthorized smart contract approvals granted to the site by using a token approval revocation tool. Transfer all remaining assets to a new, secure wallet address that has never been exposed to the malicious site. Monitor your transaction history for any unauthorized activity and report the incident to relevant blockchain security teams or community alert platforms. To prevent future incidents, verify the authenticity of any site requesting wallet connections by cross-referencing official sources, such as the project's verified social media accounts or documentation. Always treat unsolicited offers of airdrops or rewards with skepticism, as these are common lures used by crypto drainers.