Is yfibalancer.finance safe?

http://yfibalancer.finance/

Moderate Risk

Analysis coverage: strong · 0 of 5 applicable core capabilities

Verdict

The evidence is mixed or incomplete.

This site should not be trusted blindly. Important checks were limited or saved signals require independent verification.

Proceed carefully and do not use irreversible payment methods.
Read the full analysis
No saved capture is availableThe verdict remains based on the completed checks below.
No antivirus detections across 92 engines

01 · Investigation Brief

Investigation Brief

Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.

Why the score is 45

The legacy verdict is adverse but its decisive evidence is incomplete. Coverage remains separate so missing sources cannot be mistaken for clean results.

02 · Security Evidence

Security evidence

Collected signals and independent provider data for this URL.

Antivirus Engines

0/ 92

No detections

Saved result

No detections across 92 engines

No antivirus engine in this saved scan raised an adverse result. This is one signal, not a guarantee.

Malicious
0
Suspicious
0
Total
92
All 92 engine results
  • 0xSI_f33d - unrated - Clean
  • Abusix - clean - Clean
  • Acronis - clean - Clean
  • ADMINUSLabs - clean - Clean
  • AILabs (MONITORAPP) - clean - Clean
  • AlienVault - clean - Clean
  • alphaMountain.ai - unrated - Clean
  • AlphaSOC - unrated - Clean
  • Antiy-AVL - clean - Clean
  • ArcSight Threat Intelligence - unrated - Clean
  • AutoShun - unrated - Clean
  • Bfore.Ai PreCrime - unrated - Clean
  • BitDefender - clean - Clean
  • Bkav - unrated - Clean
  • BlockList - clean - Clean
  • Blueliv - clean - Clean
  • Certego - clean - Clean
  • ChainPatrol - unrated - Clean
  • Chong Lua Dao - unrated - Clean
  • CINS Army - clean - Clean
  • Cluster25 - unrated - Clean
  • CRDF - clean - Clean
  • Criminal IP - unrated - Clean
  • CSIS Security Group - unrated - Clean
  • CTX AI - clean - Clean
  • Cyan - unrated - Clean
  • Cyble - clean - Clean
  • CyRadar - clean - Clean
  • desenmascara.me - clean - Clean
  • DNS8 - unrated - Clean
  • Dr.Web - clean - Clean
  • EmergingThreats - clean - Clean
  • Emsisoft - clean - Clean
  • Ermes - unrated - Clean
  • ESET - clean - Clean
  • ESTsecurity - clean - Clean
  • Forcepoint ThreatSeeker - unrated - Clean
  • Fortinet - clean - Clean
  • G-Data - clean - Clean
  • GCP Abuse Intelligence - unrated - Clean
  • Google Safebrowsing - clean - Clean
  • GreenSnow - clean - Clean
  • GreyNoise - unrated - Clean
  • Gridinsoft - unrated - Clean
  • Guardpot - unrated - Clean
  • Heimdal Security - clean - Clean
  • Hunt.io Intelligence - unrated - Clean
  • IPsum - clean - Clean
  • Juniper Networks - clean - Clean
  • K7AntiVirus - unrated - Clean
  • Kaspersky - unrated - Clean
  • LevelBlue - clean - Clean
  • Lionic - clean - Clean
  • Lumu - unrated - Clean
  • Malwared - clean - Clean
  • MalwarePatrol - clean - Clean
  • MalwareURL - unrated - Clean
  • Mimecast - unrated - Clean
  • Netcraft - unrated - Clean
  • OpenPhish - clean - Clean
  • PhishFort - unrated - Clean
  • Phishing Database - clean - Clean
  • PhishLabs - unrated - Clean
  • Phishtank - clean - Clean
  • PREBYTES - clean - Clean
  • PrecisionSec - unrated - Clean
  • Quick Heal - clean - Clean
  • Quttera - clean - Clean
  • Rising - clean - Clean
  • SafeToOpen - unrated - Clean
  • Sangfor - clean - Clean
  • Sansec eComscan - unrated - Clean
  • Scantitan - clean - Clean
  • SCUMWARE.org - clean - Clean
  • Seclookup - clean - Clean
  • Snort IP sample list - unrated - Clean
  • SOCRadar - unrated - Clean
  • Sophos - clean - Clean
  • StopForumSpam - clean - Clean
  • Sucuri SiteCheck - clean - Clean
  • ThreatHive - clean - Clean
  • URLhaus - clean - Clean
  • URLQuery - unrated - Clean
  • Viettel Threat Intelligence - clean - Clean
  • VIPRE - unrated - Clean
  • ViriBack - clean - Clean
  • VX Vault - clean - Clean
  • Webroot - clean - Clean
  • Xcitium Verdict Cloud - clean - Clean
  • Yandex Safebrowsing - clean - Clean
  • ZeroCERT - clean - Clean
  • ZeroFox - unrated - Clean

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

03 · Investigation Story

Investigation story

The behavior, reputation, and operator evidence that explains how this site may affect a visitor.
  1. What the site claims

    Chainlink - The standard for onchain finance

  2. What we observed

    The page content was captured and checked alongside 92 antivirus results.

  3. What independent research found

    No complete independent-research result was available in this saved report.

  4. What remains unverified

    5 of the 5 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.

Wallet-drainer patterns detected

This page uses language and API references consistent with modern crypto wallet-drainer kits. If you connected your wallet or signed a transaction on this site, assume your wallet is compromised — revoke approvals, move funds to a fresh wallet with a new seed phrase, and treat the original as burned.

  • ·"Connect wallet" paired with a high-urgency action ("claim", "migrate", "revalidate", "verify", "sync").

If this is a scam — what it means for you

You were probably about to invest, connect a wallet, or deposit crypto.

If it is, any crypto you send — or any wallet approval you sign — is drained almost instantly and is essentially impossible to get back.

If this is a scam, how it works

The typical trap, step by step

This site is unverified — it may be legitimate. If it is a scam, this is the playbook pages like it follow:

  1. They promise huge “guaranteed” returns, a token airdrop, or a wallet-connect reward.

  2. You connect your wallet or deposit crypto to “get started”.

  3. Approving the wallet prompt secretly grants them permission to move your tokens.

  4. Your funds are swept out in seconds — and crypto transfers can't be reversed.

If a site follows these steps, treat it as unsafe — close it and don't enter anything.

Risk pattern correlation

Evidence correlation

Captured signals match known risk patterns

Strong pattern match

This view separates independent infrastructure evidence from pattern labels derived from the same captured page. Pattern matches add context, but they do not prove that the site belongs to a cross-domain scam network.

Correlation score
80/100
ClearLowModerateHighCritical
Evidence (3)
  • Evidence confirms this site is a clone of chain.link.
  • Domain is a typosquat of chain.link.
  • Zero contact info on a crypto/gambling page — legitimate operators publish a licence and address.
Correlated evidence (3)
Clone of chain.linkTyposquat of chain.linkPattern · Contactless Crypto

Scam-Type Likelihood

Scam-Type Likelihood

3 of 21 categories showed signals

Each card names a specific harm pattern and the concrete facts that support it. The category score is supporting context; the report verdict above remains the final severity decision.

Top match: Crypto Fraud
Crypto Fraud
Moderate likelihood
53/100
  • The evidence pattern matches crypto fraud / wallet-drainer activity.
  • The evidence identifies an airdrop / drainer lure.
  • The captured site is crypto-themed; that alone does not prove fraud.
Phishing
Moderate likelihood
35/100
  • Domain is a typosquat of chain.link.
  • The evidence pattern matches phishing / data-harvesting.
Brand Impersonation
Moderate likelihood
35/100
  • Domain is a typosquat of chain.link.
  • The evidence pattern matches brand / clone-site impersonation.
18Show remaining categories
Fake Giveaway12/100
MalwareNot detected
Investment ScamNot detected
Fake ShopNot detected
Tech Support ScamNot detected
Scareware & Fake Pop-upsNot detected
Crypto Casino / Gambling ScamNot detected
Piracy Site — High-Risk AdsNot detected
Cracked Software — Malware RiskNot detected
Recovery / Refund ScamNot detected
Gaming ScamNot detected
Pig-Butchering / Romance-CryptoNot detected
Lottery / Prize ScamNot detected
Subscription TrapNot detected
Dropshipping / Low-Quality RetailNot detected
Deceptive Supplement FunnelNot detected
Fake Celebrity EndorsementNot detected
Job / Task / Survey ScamNot detected

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Infrastructure map

How the saved page connected to the wider web.

  1. Domainyfibalancer.finance
  2. Redirects towww.weddingwire.com
  3. Hosted byCloudflare, Inc.
  4. Referencesfonts.googleapis.com · fonts.gstatic.com

Domain Timeline

  1. Aug 18, 2025
    Domain registered

    First appeared in WHOIS records — 10 months old today.

  2. Jun 20, 2026
    Saved security review — Flagged as suspicious

    The completed checks from this saved scan are detailed above.

Contact Verification

Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age10 months old
RegistrarNICENIC INTERNATIONAL GROUP CO., LIMITED
RegisteredAug 18, 2025
ExpiresAug 18, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 6, 2026 (47d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Redirect Chain

Hops
3
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1307http://yfibalancer.finance/
  • 2307https://balancer-chainlink.com/?claim_id=490221cross-domain
  • 3301https://weddingwire.com/cross-domain
  • 4200https://www.weddingwire.com/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

05 · Evidence Ledger

Evidence ledger

Coverage, provenance, and source freshness remain separate so a missing check is never mistaken for a clean result.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
Result0 of 92 engines flagged
CompletionCompleted
FindingNo adverse finding
FreshnessNot available
Browser protection
ResultNo browser threat-list match
CompletionCompleted
FindingNo adverse finding
FreshnessNot available
Page content
ResultPage fetched · HTTP 200
CompletionCompleted
FindingNo adverse finding
FreshnessNot available
Visual evidence
ResultNo usable visual evidence was saved
CompletionCompleted
FindingNo adverse finding
FreshnessNot available
Independent research
ResultIndependent research was not available for this report
CompletionUnavailable
FindingAdverse
FreshnessNot available

06 · Your Next Move

Your next move

Crypto-investment warning signs

The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.

  1. Treat yfibalancer.finance as unverified

    Do not enter credentials or send money until you have independently verified the business.

  2. Never paste your seed phrase anywhere

    Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.

  3. If you already connected a wallet

    Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.

  4. Report the wallet and URL

    File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.

    Open

Safer Alternatives

Trying to handle crypto? Use a safe option instead

Dealing with crypto? Use a regulated, well-established exchange rather than an unknown site — and never connect your wallet or enter a seed phrase on a page you can't verify.

  1. Coinbase

    Publicly-listed, regulated US exchange.

  2. Kraken

    Long-established, regulated exchange.

  3. Gemini

    Regulated US exchange & custodian.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

07 · Safety FAQ

Safety FAQ

Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.

Is yfibalancer.finance a scam or a legit crypto platform?
yfibalancer.finance raises serious red flags as a crypto fraud — do not deposit funds or connect a wallet. Our review tagged it for crypto drainer and airdrop drainer. The domain is 10 months old through NICENIC INTERNATIONAL GROUP CO., LIMITED. It may not be an outright scam, but the risk is high enough that you should verify it independently before trusting it with money or data.
Is yfibalancer.finance safe to use?
yfibalancer.finance has a Safety Score of 45/100 (Moderate Risk). Analysis coverage is strong at 78%. Do not trust blindly; analysis may be limited.
What should I do if I already sent funds to yfibalancer.finance?
If you've already paid or handed over details on yfibalancer.finance, act quickly. 1) Cryptocurrency payments are almost always irreversible, so a bank chargeback usually won't apply — instead report the wallet address to the exchange you sent from and ask them to flag it. 2) Report the site to the U.S. FTC at reportfraud.ftc.gov or the FBI's IC3 at ic3.gov, and in the UK to Action Fraud at actionfraud.police.uk. 3) If you entered a password, change it on yfibalancer.finance and anywhere you reused it, and turn on two-factor authentication. 4) Watch your bank and email for follow-up fraud, and keep screenshots as evidence.
Can I get my money back from yfibalancer.finance?
Possibly, but it's difficult. Crypto transfers can't be reversed like card payments, so recovery usually depends on the receiving exchange freezing the funds — report the wallet address and transaction ID to that exchange and to IC3 (ic3.gov) as fast as you can. Be very wary of "recovery agents" who contact you promising to get your crypto back; that is almost always a second scam targeting victims.
Is yfibalancer.finance a Ponzi scheme or a real crypto investment?
Signals point to a high-risk crypto scam rather than a genuine platform. Warning signs we look for — guaranteed or unrealistic returns, pressure to deposit quickly, fake celebrity or exchange endorsements, and demands to send crypto to a wallet you don't control — are hallmarks of Ponzi-style and "pig-butchering" fraud. A real platform never guarantees profits, and no legitimate service asks you to send crypto to "unlock" a withdrawal.
How do I report yfibalancer.finance?
You can report yfibalancer.finance through several official channels: the U.S. FTC at reportfraud.ftc.gov, the FBI's Internet Crime Complaint Center (IC3) at ic3.gov, and — in the UK — Action Fraud at actionfraud.police.uk. You can also flag it to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish) so other browsers warn about it, and report it to the company being impersonated if there is one. Reporting helps get scam sites taken down faster.
Why does yfibalancer.finance look legitimate if it's a scam?
Modern scams are built to look convincing. A valid SSL padlock, a polished template, stock photos, fake reviews, and a trust badge can all be added in minutes and prove nothing about who runs the site. Scammers buy cheap domains, clone real designs, and copy legal pages wholesale. That's exactly why an automated review that checks the domain's age, hosting, blacklists, and behaviour — rather than just how the page looks — is more reliable than a first impression.
Has yfibalancer.finance been flagged by antivirus engines?
No — all 92 antivirus and blocklist engines in our malware network currently report yfibalancer.finance as clean. That's a good sign, though antivirus coverage is only one of the many signals we weigh, and brand-new scam sites can appear clean before vendors catch up.
Is yfibalancer.finance on any phishing or malware blacklists?
No — yfibalancer.finance is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
How old is the yfibalancer.finance domain?
yfibalancer.finance is 10 months old, registered on August 18, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. A multi-year registration history is one of the stronger signals against a scam, though it's never a guarantee on its own — established domains can still be misused.
Does yfibalancer.finance have a valid SSL certificate?
Yes — yfibalancer.finance presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, valid for another 47 days. Important caveat: SSL only encrypts the connection between you and the site — it does not verify who runs it. Almost all scam sites now have valid SSL too, so a padlock alone never means "safe".
How often is the yfibalancer.finance report updated?
This report is a record of the scan run on June 20, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about yfibalancer.finance has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

08 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.
Verdict score
45/100
Moderate Risk

The evidence is mixed or incomplete.

Saved captureyfibalancer.financeCapture-safe
No saved screenshot was available for this report.
Conclusion

This site should not be trusted blindly. Important checks were limited or saved signals require independent verification.

Recommended actionProceed carefully and do not use irreversible payment methods.
Saved evidence only

Missing checks are never treated as a clean result.

Scan another URL
Continue toCommunity

09 · Community

Community

First-hand experiences add human context after the scanner has reached its conclusion.

0 community contributions

Share what happened, what the site requested, and what others should watch for.

Community reviews never change the scanner verdict.

Loading…
Loading comments…