“carddav.address.yahoo.com”

Yes, it is some kind of a scam→Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support

As Lawrence Finch said, of course it is a scam, but I don’t see the connection with the original question.

Do you use Yahoo account for your Contacts?

No idea why it wanted to install a profile but doesn’t sound good..