Is flower-yakkamon.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Yakkamon is presented on the homepage as the "Official Site" of a creature-collector game on the Ronin blockchain network, under a hyphenated, recently created domain. To a visitor it reads as a promotional landing page for a blockchain-based gaming title. Its apparent purpose is to draw players into a game ecosystem tied to a crypto network, where interaction can lead to wallet-linked or financial activity.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Multiple independent threat-intelligence engines currently flag the domain as malicious or suspicious, including two top-tier security vendors, and a confirmed blacklist listing exists. A reputation of this strength cannot be offset by the technical hygiene the site shows. Brand impersonation and conflicting legal identities were not established, and no phishing page was directly confirmed. The "official site" claim in the page title cannot be tied to any independently confirmed publisher, and the domain is a hyphenated, newly created name. For a crypto-gaming brand, that pattern is common in lookalike and wallet-targeting campaigns, so the claim should not be accepted at face value. Behavioral testing adds circumstantial weight. The page runs several suspicious inline scripts and sends a notable share of its traffic to third-party destinations, including repeated external data submissions. No wallet-connection prompt, wallet-drainer behavior, clipboard tampering, or hidden credential form was observed in the sandbox runs. These findings are not evidence of safe behavior, because such mechanisms often activate only under real user conditions. Evidence:

• Homepage title: asserts "Official Site" for a creature-collector game on Ronin, with no independent confirmation of the publisher.
• Reputation scan: 9 engines rated the domain malicious and 4 suspicious, with two top-tier vendors among the detections; an external blacklist entry is also present.
• Domain registered 2026-08-18 (~0.19 years old) through NICENIC International Group Co., Limited, with registration details incomplete.
• Browser sandbox: 3 suspicious inline scripts, 6 external POST requests, and 6 console errors across 3 successful runs; no wallet-drainer or clipboard-hijack activity detected.

Regulatory Verification Notes

No regulator, registry, or third-party reputational dataset links this site to a licensed or registered operator, and no broker-database match exists. The available evidence does not establish the legal entity behind the domain, and ownership is opaque. Because the game is positioned in the blockchain ecosystem, any token, asset, or in-game purchase feature would raise financial-services and consumer-protection questions that the site's identity cannot currently answer. The domain is also not recognized in decentralized-finance directories, so there is no independent ecosystem footprint to corroborate it. These are verification gaps. They are secondary to the blacklist findings above and are not a separate accusation. Evidence:

• Homepage: no operator, licensing, or registration details independently confirmed.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate issued by WE1 (domain-validated only), valid to 2027-01-14. This confirms encryption, not operator identity.
• Web archive: 3 snapshots, all in 2026, from 2026-08-21 to 2026-10-11, so there is no established history.

What to Verify Next

Before any engagement, the legitimacy of the Yakkamon brand and this domain must be checked through routes independent of the site. These are the official Yakkamon announcements and community channels, and the Ronin ecosystem's own listings of approved games. A link to this domain should be accepted only if the project confirms it there. Any claim of regulatory authorization should be checked directly with the relevant registry, not through on-site statements. Official support and contact channels should likewise be confirmed offline or through the project's verified accounts. Evidence:

• Homepage: the "Official Site" claim needs corroboration from the project's verified channels.
• Domain: the registration is only about two months old, so the project's own announcements should show whether it is endorsed.
• Ecosystem: a game on Ronin should appear in that network's official listings.

Summary Verdict

The site carries an elevated, high-risk posture. Confirmed external threat detections combine with a very young, unestablished domain and an unverified claim to be an official game site. Protective technical measures and a valid certificate do not change this assessment.

Infrastructure Integrity

The site sits entirely behind Cloudflare's CDN and WAF, and every observed address is an edge server. The origin host was not observable, so hosting cannot be verified independently, and content could be swapped quickly without any visible infrastructure change. Bot-protection screening is active. This is a mitigating factor only and cannot offset the reputation findings. An unconfirmed heuristic notes a young domain with sparse subdomains, which is consistent with the broader picture.

Closing Assessment

The site should be treated as unsafe for anything beyond passive viewing. Wallet connections, credential entry, account login, downloads, and any payment or token transaction should all be avoided. Anyone who has already interacted with the site should review wallet permissions and change any reused passwords.