247de[.]xyz

This domain, 247de.xyz, operates as a brand impersonation scam designed to deceive users of the Yearn decentralized finance platform. The site mimics legitimate Yearn services, likely presenting fake investment opportunities or yield farming schemes under the guise of 24/7DailyEarning. Visitors are at risk of financial loss through fraudulent transactions, credential harvesting, or crypto wallet drainers, as the site’s infrastructure and content are engineered to exploit trust in the Yearn brand. The inclusion of interactive elements like Smartsupp chat and YouTube embeds further enhances its deceptive appearance, making it harder for users to recognize the threat. Analysis indicates high-risk infrastructure with multiple red flags. The domain was created on July 5, 2025, and is registered through Cosmotown Inc, a registrar frequently associated with fraudulent activities. Security vendors on VirusTotal flagged 247de.xyz as malicious, with 9 out of 95 engines detecting it as a threat. Additional indicators include a Scamadviser trust score of 1 out of 100, a Let’s Encrypt SSL certificate (commonly used by threat actors for perceived legitimacy), and technologies like PHP and LiteSpeed, which are often leveraged in phishing kits. The domain’s IP address, 163.61.188.222, has also been linked to other suspicious activities, reinforcing its classification as a confirmed scam. If you visited 247de.xyz or interacted with its content, immediate action is required to mitigate potential damage. First, disconnect any wallets or devices that may have connected to the site to prevent unauthorized transactions. Review all recent transactions for signs of unauthorized activity, such as unexpected token transfers or approvals. If credentials or private keys were entered, assume they are compromised and revoke any associated wallet permissions or smart contract allowances. Monitor accounts closely for unusual activity and consider reporting the incident to relevant blockchain security teams or fraud reporting platforms. Users should also scan their devices for malware, as some crypto drainers deploy additional payloads to maintain persistence.