voting-yearn[.]xyz

The domain voting-yearn.xyz is a known brand impersonation scam that poses as Yearn. This site has been flagged as a phishing attempt, with an elevated risk level, and is currently taken offline. It was used to trick users into believing they were interacting with the legitimate Yearn service, potentially leading to the theft of sensitive information or cryptocurrency.

voting-yearn.xyz has been detected by 2 of 95 vendors on VirusTotal, including Forcepoint ThreatSeeker and SOCRadar. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and was created on March 26, 2026. It appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. The site was observed to have a page title of 'Just a moment...' and uses technologies such as Cloudflare Browser Insights, Cloudflare, and HTTP/3. The HTTP status code returned is 200, indicating that the server responded successfully to the request.

If users have interacted with voting-yearn.xyz, they should immediately change their passwords and enable two-factor authentication for their Yearn and related accounts. They should also monitor their accounts for any unauthorized activity and report the phishing site to their security software providers and the impersonated brand. Reporting can be done through the official Yearn website or by contacting the support team of the security blocklists that have flagged the domain. Users should remain vigilant and verify the authenticity of any website before entering sensitive information or performing transactions.