saturnfinance[.]fun

saturnfinance.fun poses a focused brand impersonation threat by masquerading as the Yearn finance platform. This domain aims to deceive users into trusting the fraudulent site, potentially leading to credential theft or unauthorized transactions linked to the Yearn ecosystem.

Technical analysis reveals that saturnfinance.fun was registered recently on March 09, 2026, via PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to IP address 188.114.97.3 and currently holds an SSL certificate issued by Let's Encrypt, which may lend it a degree of perceived legitimacy. VirusTotal analysis indicates zero detections out of 95 antivirus engines at this time, suggesting it is either very new or has not yet been widely reported. The domain remains active and is presently under investigation, with a brand impersonation risk level.

Users who have visited saturnfinance.fun and entered any sensitive information, especially related to Yearn services, should immediately change their credentials and monitor their accounts for suspicious activity. Avoid interacting with unsolicited links or messages directing to this domain. Security teams and researchers are advised to keep this domain on watchlists and update blocklists as further intelligence develops to prevent potential harm from this emerging threat.