[Scam]: Yearn Finance fake site

[Jating]

What happened: Yearn Finance fake site

Website:

Code:

https://yeanr.finance/

Archived: https://archive.is/p6O4e

Whois Record for YEaNr.finance
How does this work?
Domain Profile
Registrant    REDACTED FOR PRIVACY
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    clientTransferProhibited
Dates    18 days old
Created on 2020-12-27
Expires on 2021-12-27
Updated on 2021-01-01    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 1,008,481 domains)
DNS2.NAMECHEAPHOSTING.COM (has 1,008,481 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
(p) (f)
IP Address    162.0.209.74 - 82 other sites hosted on this server

So they took advantage of the mis spelling and created this malicious website. If you directly type it to your browser, and make the mistake, you will surely fall for this trap. So bookmark it and check even the spelling just to make sure.

[Furious 7]

At first glance the domain looks similar except that the letter "R" is at the end and it should be able to distinguish the spelling so that it doesn't go wrong on the website.

In such a way they will make even the UI display the same, there is no difference in the catch and I just make sure this needs to be careful in spelling we need to pay attention that the domain we are visiting is correct.

Good catch.

[ScamViruS]

When a project is popular in the market, a group of scammers use the name of the project to create a fake website. They are busy coming up with new scam ideas every day. These scammers create websites in such a way that new crypto users get confused and fall prey to scammers.

So be extra careful now because lots of new fake websites are being created by scammers.

[Jating]

[..snip..]

Good catch.

Thanks, yeah that's the trick that these scammers are trying to pull off, if you are not very careful, it's hard to see the difference, because the look and UI display is the same.

[..snip..]

So be extra careful now because lots of new fake websites are being created by scammers.

Yes, lots of fake site are being created by cyber actors like mushrooms, if one site gets remove, they are ready with a fresh new site.
Unfortunately, the site is still up, we need more people to report it ASAP.

[TalkStar]

So they took advantage of the mis spelling and created this malicious website. If you directly type it to your browser, and make the mistake, you will surely fall for this trap. So bookmark it and check even the spelling just to make sure.

Just same like other phishing sites they are trying to make investors fool through similar looking domain. Actually they are targeting a specific group of people who are existing user of yearn finance or planning to invest in this project. In a situation like this its always safer to make the habit of bookmarking real websites which will keep you far from getting scammed. I have checked their domain and on first look its really hard to detect the difference between "yearn" & "yeanr".

I will suggest our forum newbies to double check any domain before clicking on the link and its the only way by which we can keep distance from phishing related incidents.

When a project is popular in the market, a group of scammers use the name of the project to create a fake website. They are busy coming up with new scam ideas every day.

 
Most phishing sites build their platform by following a popular site and its nothing new. They know well its the key fact of their money stealing trap.   

[Jating]

Another of this fake website created by criminals. This is being spread in Youtube video, so if you find one, report it right away. And yes, the strategy here is to create as many fake sites using yearn.finance so this won't simply stop as they are targeting crypto website that is in the hot topic right now and making a good pump.

Code:

https://yearni.finance/

Archive: https://archive.is/Dg09N

Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    4 days old
Created on 2021-01-17
Expires on 2022-01-17
Updated on 2021-01-17      

IP Address    104.21.34.35 - 7 other sites hosted on this server

[Baofeng]

You may add to add this to your list of fake yearn.finance. What's funny is the name of the website though, Lol, it's supposedly coinomi fake site, but perhaps they've change their mind.

Do not give your 24 mnemonic seed here as this is a very obviously phishing site.

Code:

https://www.pros-coinomi.com/

Archived: https://archive.is/Xydac

[Dave1]

Speaking of fake yearn.finance and similar to what @Baofeng uncovered, here is a not so related domain name but it bear the same fake and phishing style,

Code:

https://www.trust-ebook.com/

Perhaps this is a recycle website by these criminals.

[zanezane]

When a project is popular in the market, a group of scammers use the name of the project to create a fake website. They are busy coming up with new scam ideas every day. These scammers create websites in such a way that new crypto users get confused and fall prey to scammers.

So be extra careful now because lots of new fake websites are being created by scammers.

This will always hold true as long as we use the Internet, fakes will pop-up to dupe those unaware. My first encounter of this phishing websites are the ones that are created by scam call center agencies, some even use a demo of a legitimate bank to make it look like they were doing a real money transfer to the victims. Some dead giveaways that a website scams that I have noticed over the years is that they seem to not bother with making the website pleasing to the eye and grammar is the least of their worries and they even sell products that seems legit at first glance but when you take a close look, it is just a picture taken from Google Images.

[cryptomaniac_xxx]

Very interesting take by scammers here, the fake site are now not related to the name of the original site? Lol, and yes, there could be recycling their old website to continue duping crypto enthusiast specially newbies. That's why we need to verify first.

Yearn finance is in the top 42, with a price close to bitcoin at $31k, it's really going to be a prime target by criminals.

[Furious 7]

Very interesting take by scammers here, the fake site are now not related to the name of the original site? Lol, and yes, there could be recycling their old website to continue duping crypto enthusiast specially newbies. That's why we need to verify first.

Yearn finance is in the top 42, with a price close to bitcoin at $31k, it's really going to be a prime target by criminals.

I don't know why there are so many domains and after checking in whois it was only registered a few days later was it really recycled the domain?

Criminals are still criminals they will definitely target big company names in crypto by inserting a few letters to distinguish them so that is very important in verification, especially in the url.
The new doin name will appear again. Lol like her, we are used to it to immediately report it.