yearn[.]fi-connects-wailet-v3-api[.]com

The domain yearn.fi-connects-wailet-v3-api.com is a phishing site engaged in brand impersonation targeting Yearn, a decentralized finance platform. This scam site mimics legitimate Yearn services to deceive users into disclosing sensitive information or interacting with malicious smart contracts, though no active drainer kit was identified. As of the latest verification, yearn.fi-connects-wailet-v3-api.com has been taken offline.

Technical indicators confirm the domain's malicious nature. Yearn.fi-connects-wailet-v3-api.com was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, with a Gridinsoft trust score of 0/100. It appears on one security blocklist (PhishDestroy) but is not flagged by Google Safe Browsing. The domain was created on February 21, 2026, and resolves to the IP address 188.114.96.3, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title was 'Access Denied'. Registrar information is not available.

Users who interacted with yearn.fi-connects-wailet-v3-api.com should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Change passwords for any accounts accessed via the phishing site and enable two-factor authentication. Monitor accounts for unauthorized transactions or suspicious activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand (Yearn) to aid in takedown efforts and protect other potential victims.