Is yieldfarms.firebaseapp.com safe? TrustSniffer's low-trust assessment: 40/100

Overview

This website is a single-page application served from a Firebase-hosted subdomain. Its page title reads "The Wallet Checker · Yield Farm", and the captured homepage carries only a short amount of text. It presents itself as a wallet-checking and yield-farming utility, which points to a crypto-asset interaction front end rather than an informational or commercial storefront. The captured content does not set out a business model, an operator or any product terms.

Scam/Impersonation Risk

Threat-intelligence sources currently flag this site. Two independent reputation engines rate the domain as malicious and one more rates it suspicious. Those hits corroborate each other and confirm that the site is blacklisted. They are the decisive reason for the cautionary posture. No identity contradiction was observed, because no conflicting legal-entity names appear. No brand impersonation was confirmed, and no phishing classification was confirmed in the page-level findings. A separate set of abuse reports exists, but it attaches to a shared content-delivery address. It reflects the provider's shared infrastructure rather than this site specifically, and it should not be read as additional proof against the site. The domain is also extremely young, and the site is presented under a free-tier hosting namespace rather than a dedicated, independently registered domain. This weakens any basis for assuming legitimacy. In sandboxed browsing the page showed no wallet-connection prompts, clipboard tampering, hidden forms, credential forms posting off-site or content cloaking. Its network behaviour was nonetheless noisy: heavy third-party request traffic, a small number of posts to destinations outside the expected set, and a very high count of browser console errors. For a page whose stated theme is wallet checking and yield, that combination is consistent with an unfinished or poorly maintained front end. It is also consistent with a front end that is loading content from undisclosed sources, and the available evidence cannot tell these apart. Evidence:

• Homepage: titled "The Wallet Checker · Yield Farm", with a short body of text and no identifiable operator.
• Threat-intelligence reputation: 2 malicious and 1 suspicious verdicts against the domain, with 58 harmless and 32 undetected verdicts from the remaining engines.
• Domain provenance: first-seen 2026-09-05 and last-seen 2026-10-09 across 6 archive snapshots in a single tracked year, and a domain age of roughly 0.13 years (~49 days).
• Sandbox behaviour (3 of 3 runs completed): 37 external XHR/fetch requests, 11 external POST requests of which 2 went to non-whitelisted destinations, and 120 console errors.

Regulatory Verification Notes

The captured pages show no licensing, registration or regulatory disclosure. Automated page analysis could not independently tie the site to a real-world brand or person. Operator identity therefore remains unverified, and the evidence leaves it unclear what legal entity stands behind the site. Nothing connects the "wallet checker" and "yield farm" theme to a regulated financial service, and no third-party broker or regulatory-watchlist record matched this site. That absence is a verification gap and is not by itself evidence of wrongdoing. The transport layer is technically sound but offers little assurance of identity, because a basic domain-validated certificate establishes control of the hostname and nothing about who operates it. Evidence:

• Hosting: served from AS54113 (Fastly, Inc., US), with the registry shown as ARIN.
• TLS: certificate issued by WR4 (DV), valid to 2026-12-22, with 58 days remaining.
• Homepage: no operator name, licence reference or registration number was observed in the captured content.
• Third-party broker data: no match found.

What to Verify Next

Verification must be completed before any interaction beyond viewing the page. The first step is to establish through an independent, offline route who operates the site and whether any entity claims responsibility for it. The second is to confirm whether any regulated provider officially owns this wallet-checking or yield service. Any link to it should be taken from that provider's verified channels, not from this address. Official support or contact channels should likewise be confirmed independently before any contact is made. Finally, the current threat-intelligence status of the domain should be rechecked, since a listing can be cleared once a site is cleaned or taken down. Evidence:

• Reputation: the current listing is based on multiple independent detections, so a fresh check should show whether the status has changed.
• Provenance: the domain has a very short, recent history, so no long-term track record exists to rely on.
• Homepage: the captured text names no operator, so ownership must be confirmed from outside the site.

Summary Verdict

The site is rated at an elevated risk level. Confirmed blacklist detections outweigh the technically valid transport security and the continuous but very brief history. The legitimacy of the operator cannot be established from the evidence, and the available evidence does not support treating the site as a trustworthy venue for sensitive activity.

Infrastructure Integrity

The site is delivered through the Fastly content-delivery and edge-protection network. Both observed addresses, one IPv4 and one IPv6, are edge nodes of that network, and no origin server address was exposed. This is a mitigating factor only. Reputable, professionally operated infrastructure cannot offset the external threat detections, and the edge-only visibility prevents independent verification of the hosting behind it. It also means the content served could be changed quickly without any visible change in hosting.

Closing Assessment

Treat the site as read-only at most. Do not log in, connect a wallet, enter credentials or make any financial transaction on it until the operator is independently identified and the threat listings are cleared.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.