--- title: "Is yimmenu.live a Scam? Trust Score 5/100" source: TrustSniffer type: Website trust & fraud report subject: "yimmenu.live" verdict: "Critical Risk" title: "Is yimmenu.live a Scam? Risk Report, Score 5/100" trust_score: 5 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/yimmenu.live assessed: 2026-10-14 --- # Is yimmenu.live a scam? TrustSniffer's high-risk assessment: 5/100 ## Verdict **Verdict: Critical Risk, trust score 5/100.** yimmenu.live shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-14 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | A GTA V modding hub (YimMenu) offering downloads, community resources, tools, and support/FAQ. The page appears informational and focused on mod distribution. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 7 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 3 months old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (21 snapshots) | Clear | | Certificate | Encrypted connection (Issued by YR2) | Noted | ## The page as captured ![Screenshot of the yimmenu.live homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/yimmenu.live/screenshots/first.png) _What yimmenu.live served when TrustSniffer captured it on 2026-10-14. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. The website is a GTA V modding and download portal branded as YimMenu, presenting a free “undetected” mod menu, cheats and mods, tools, community resources, support, and frequently asked questions for visitors seeking game-modification software. ### Scam/Impersonation Risk The site presents as an informational community resource rather than a financial service, and the captured homepage showed no login form, credential collection, or explicit payment flow. However, the site is **blacklisted**, with multiple independent security detections identifying malicious characteristics; that external signal is decisive despite the absence of visible phishing mechanics or brand-impersonation indicators on the page. Downloads described as a “Free Undetected Mod Menu” also create a material malware-exposure concern because the safety of distributed files cannot be established from the page content alone. No separate identity contradiction or confirmed brand impersonation was observed. Evidence: - The homepage is identified as “YimMenu | GTA V Modding Hub” and advertises “Download YimMenu GTA 5 (Latest Version) | Free Undetected Mod Menu.” - External security assessment recorded 7 malicious detections and 3 suspicious detections from 15 evaluated results, with Fortinet and Kaspersky among the flagged vendors. - The domain is blacklisted by the evaluated external reputation sources. - Domain registration records show creation on 2026-07-03 and an age of 0.28 years; archival records contain 21 snapshots spanning 2026–2026, tracked across 1 year. ### Regulatory Verification Notes The available homepage content does not identify a legal operator, company registration, licensing authority, or registration number. That is a disclosure gap rather than independent proof of fraud, and the site's apparent modding/download model does not present an evident regulated financial activity requiring a financial license on the captured page. Real-world operator identity remains unverified, so the YimMenu presentation should not be treated as proof of a legally accountable entity. The registrar and transport certificate provide administrative and technical facts, not evidence of licensing or operator legitimacy. Evidence: - The captured homepage text provides product and community descriptions but no company name, legal-entity details, license, or registration number. - Registration records identify Global Domain Group LLC as registrar. - The site is served from AS210457, identified as KYONIX – Kyonix Networks Limited, GB. - The site uses a DV TLS certificate issued by YR2, valid through 2026-12-21. ### What to Verify Next Before any interaction beyond passive viewing, an independent source should confirm who operates the YimMenu service and whether the distributed software is authentic and malware-free. Any proposed download should be validated through a trusted, independently established project channel and scanned in an isolated environment; credentials, payment details, and account access should not be provided. Official support or contact channels should be confirmed through an independent route rather than relying solely on the website. Evidence: - The homepage contains no sensitive form, login form, password submission, or external password destination. - Behavioral testing recorded zero external XHR requests and zero external posts across 3 successful runs. - No wallet connection, wallet-sensitive action, clipboard hijack, hidden form, or suspicious inline script was observed during the captured interaction tests. ### Summary Verdict The website has a critical-risk posture and should not be treated as a trusted destination for sensitive interaction. The available evidence supports only limited passive, read-only observation; legitimacy and accountability are not established, and the external threat findings materially outweigh the site’s otherwise informational presentation. ### Infrastructure Integrity The site resolves directly to infrastructure operated by KYONIX – Kyonix Networks Limited, GB, on AS210457, with no trusted CDN or WAF identified and one likely origin IP exposed. This provides no meaningful protective offset to the external reputation findings. The TLS deployment is technically valid, but its DV level confirms transport encryption only and does not validate the operator. ### Closing Assessment Passive viewing should be limited to non-sensitive observation; downloads, credential submission, account access, and financial interaction should be avoided unless the operator and every file can first be independently validated. _Written analysis generated 2026-10-14 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by governance, external reputation, hosting and network, registration and ownership, page content. ### 01 Governance - A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`) ### 02 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 03 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 04 Registration and ownership - The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`) ### 05 Page content - The page has no description for search engines, which established sites usually provide. (Page content `rule:PAGE_SEO_MISSING_META`) ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of yimmenu.live. - The request stayed on yimmenu.live. It was not redirected to another domain. (Clear) - Registration is published under Global Domain Group LLC. (Clear) - DNS for this domain is served by eternitynames.net, across 4 name servers. (Noted) - The registration is paid up to 2027-07-03. (Noted) - The earliest public archive of this site is from 2026-08-05. (Clear) - It is hosted on KYONIX, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Global Domain Group LLC | | Hosting | KYONIX - Kyonix Networks Limited, GB | | Country | US | | Server IP | 144.31.106.40 | | Name servers | ns4.eternitynames.net, ns2.eternitynames.net, ns3.eternitynames.net, ns1.eternitynames.net | | CDN / edge network | Not detected | | Resolved IP addresses | 1 | | Edge IP addresses | 0 | | Likely origin IP addresses | 1 | | SSL issuer | YR2 | | SSL expiry | 2026-12-21 | | Domain age | 0.28 years (continuous registration) | | Domain expiry | 2027-07-03 | | Archive first seen | 2026-08-05 | | Archive snapshots | 21 | | Reputation | VirusTotal: 7 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about yimmenu.live at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [faokox.com](https://trustsniffer.com/report/faokox.com), also hosted by KYONIX (Critical Risk, 0/100) - [taefox.com](https://trustsniffer.com/report/taefox.com), also hosted by KYONIX (Critical Risk, 0/100) - [pumpfunlaunch.live](https://trustsniffer.com/report/pumpfunlaunch.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [shufflechain.live](https://trustsniffer.com/report/shufflechain.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [swanbitcoinreports.live](https://trustsniffer.com/report/swanbitcoinreports.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [tradepumpfun.live](https://trustsniffer.com/report/tradepumpfun.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpl-promotion.live](https://trustsniffer.com/report/xrpl-promotion.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [appvirtuals.live](https://trustsniffer.com/report/appvirtuals.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [jupiter-desktop.com](https://trustsniffer.com/report/jupiter-desktop.com), another site assessed as critical-risk (Critical Risk, 0/100) - [stonk-campaign.com](https://trustsniffer.com/report/stonk-campaign.com), another site assessed as critical-risk (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site) - [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26) - [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen) --- *Source: [TrustSniffer](https://trustsniffer.com/report/yimmenu.live) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/yimmenu.live · assessed 2026-10-14.*