[Scam]: Fake Yearn.Finance

[Yaunfitda]

What happened: Fake Yearn.Finance website

Website:

Code:

https://yearm.finance/

Archived: https://archive.is/hWnFY

Registrar    NameCheap, Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    1 days old
Created on 2020-10-07
Expires on 2021-10-07
Updated on 2020-10-07    
  
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 934,297 domains   
  
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    162.0.235.4 - 137 other sites hosted on this server

Real site: https://yearn.finance/

Please notice the spelling of fake and the real site. Maybe someone out there could be fooled as the fake one is an exact copy. So visually there's no difference unless you check closely the spelling.

[sujonali1819]

Got and EAL warns too. That means this site has also run some scripts to steal people's private keys and passwords. So the fake spelling is n=m. It really hard to find this if people don't see it properly. The funny thing is scammers are now started to copy fake projects too. 

[$crypto$]

Got and EAL warns too. That means this site has also run some scripts to steal people's private keys and passwords. So the fake spelling is n=m. It really hard to find this if people don't see it properly. The funny thing is scammers are now started to copy fake projects too. 

Scamer tries to trick their victims by changing one letter oh god this is ridiculous what they do, are they ambitious about money so do whatever they want?

 This scamer never stays silent, so we must be careful when looking at the website link so that we don't become a victim of phishing.

 But I think this is a good catch, man.

[shamimal93]

Nowadays, scammers use new methods.  Which is very difficult for ordinary people to understand.  They create phishing websites.  A phishing site is a type of website where a single character changes which is so much tough to understand.  Many people are victims of this fraud.  Without realizing it, they give them access.  We should be very careful because there is no shortage of scammers now.

[2double0]

To be honest, I would never trust any defi projects and not even the newly coming websites which follow a successful 'yet shit' project's name when trying to successfully scam innocent people. I think innocent people now need to become smart enough because nobody can be spoonfed by any of us and if they are not smart, then now or later, they will get scammed surely. We should look that almost 25% of the whole defi marketcap went out of the markets in just 24 hours. Do not visit these projects yet while you are still unclear about them. I will be making a thread soon with some major scam techniques and how these sxammers try to get investors throw their money in their projects or systems.

[Baofeng]

To be honest, I would never trust any defi projects and not even the newly coming websites which follow a successful 'yet shit' project's name when trying to successfully scam innocent people. I think innocent people now need to become smart enough because nobody can be spoonfed by any of us and if they are not smart, then now or later, they will get scammed surely. We should look that almost 25% of the whole defi marketcap went out of the markets in just 24 hours. Do not visit these projects yet while you are still unclear about them. I will be making a thread soon with some major scam techniques and how these sxammers try to get investors throw their money in their projects or systems.

Defi has been taking off, Total Value Locked in Defi Jumped 85% in August, $8 Billion in Assets Held. And this yield farming is also making a hype, however, there are a lot of anonymous projects that simply exit scam or write a backdoor code to steal investors money. So it is really dangerous out there, as not only the project themselves are scamming, but cyber actors are also leveraging it as their target just like what the OP has posted, mis spelling or typo attacks. This is a good catch and hope no one falls for it.

[TimeTeller]

To be honest, I would never trust any defi projects and not even the newly coming websites which follow a successful 'yet shit' project's name when trying to successfully scam innocent people. I think innocent people now need to become smart enough because nobody can be spoonfed by any of us and if they are not smart, then now or later, they will get scammed surely. We should look that almost 25% of the whole defi marketcap went out of the markets in just 24 hours. Do not visit these projects yet while you are still unclear about them. I will be making a thread soon with some major scam techniques and how these sxammers try to get investors throw their money in their projects or systems.

Defi has been taking off, Total Value Locked in Defi Jumped 85% in August, $8 Billion in Assets Held. And this yield farming is also making a hype, however, there are a lot of anonymous projects that simply exit scam or write a backdoor code to steal investors money. So it is really dangerous out there, as not only the project themselves are scamming, but cyber actors are also leveraging it as their target just like what the OP has posted, mis spelling or typo attacks. This is a good catch and hope no one falls for it.

This scammer is using yearm.finance domain name but when you visited the site the header is yearn.finance.
So it is very clear that they are just phishing here. For those that will type "m" instead of "n", and they are next to each other in your keyboard.
But like 2double0, not really fan of this Y-project. Because if you visit the original site, what are they offering right now? Nothing.

[Lorence.xD]

Nice catch, I would have fallen for this because Yearn is a rare name that is associated with finances. Most scam sites do not put effort in their website design, pretty much a big red flag in my opinion because if your business is a real thing then you should put an effort or worse at least put an effort for their website. They are growing each day and I hope more people are getting aware about this scams and passing on the knowledge on how to identify scams.

[2double0]

Defi has been taking off, Total Value Locked in Defi Jumped 85% in August, $8 Billion in Assets Held. And this yield farming is also making a hype, however, there are a lot of anonymous projects that simply exit scam or write a backdoor code to steal investors money. So it is really dangerous out there, as not only the project themselves are scamming, but cyber actors are also leveraging it as their target just like what the OP has posted, mis spelling or typo attacks. This is a good catch and hope no one falls for it.

These scammers don't limit themselves to writing a backdoor code when they want to scam innocent investors but even target swapping websites like uniswap, sushiswap, burgerswap and others which warn users about possible duplicacy of an existing project (like yearn finance) where these scammers use the same name of the project but their contract address is different. It is better to keep your eyes open while investing your money to swap or give liquidity on a specific pair at these websites.

[cryptomaniac_xxx]

Nice catch, I would have fallen for this because Yearn is a rare name that is associated with finances. Most scam sites do not put effort in their website design, pretty much a big red flag in my opinion because if your business is a real thing then you should put an effort or worse at least put an effort for their website. They are growing each day and I hope more people are getting aware about this scams and passing on the knowledge on how to identify scams.

Yes, hard to catch the difference specially with the keyword "Yearn", it's a good marketing strategy for the real project behind, but scammers are more intelligent by changing the not so obviously letters int "Yearm". They don't put an effort because they can simply copy the website, the only effort is finding a similar domain looking and that's it.