Is flvto.onl safe?
https://flvto.onl/ja/
Checked on
How we checked
Coverage: complete · 6 of 6 applicable core capabilities
- Antivirus (59 of 93 engines answered): completed
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Flvto clone where the Convert button opens unrelated ad pop-ups
flvto.onl is a video-to-audio converter page using the Flvto name. A Japanese security write-up lists flvto.onl among look-alike clones run by third parties for ad revenue. In our own test, pressing the main Convert button opened an unrelated external ad site in a pop-up. The same write-up warns that these clones can lead to fake virus warnings. Technical checks were mostly clean, with one isolated antivirus detection. The ad-driven flow puts the site in High Risk.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 40/100
High Risk covers scores 21–44. 4 findings pulled the score down; 3 pushed it up.
What pulled the score down
- StrongA primary play, convert, continue, or download control opened an unrelated external destination.-3 pts
- Moderate1 independent antivirus family reported an adverse result.-1 pts
- ModerateOne public warning on a scam-warning or security site: "flvto.works・flvto.llc・flvto.mx・flvto.onlといった名前だけ似せたクローンサイトが次々と立ち上がりました。これらは本家の運営とは無関係な第三者が、広告収益を目的に運営しているケースが大半です。"-1 pts
- ModerateThe Convert button opened an unrelated external ad pop-up.-1 pts
What pushed the score up
- SupportsNo Safe Browsing warning, valid encryption, and a domain about two years old.
- SupportsPhone number listed (1-800-778-7879).
- SupportsPostal address visible on the page.
Points come from the saved evidence ledger: it lowered the score from 46 to 40 and split those 6 points between the findings that show points; the others carry no points in the ledger. Community reviews never change the Safety Score.
Lost money or shared details on flvto.onl? Do this now
Act quickly: the first hours matter most for a chargeback.
- Call your bank or card issuer now
Ask them to dispute the charge or open a chargeback; the sooner you act, the better your odds. Card payments can often be reversed. Bank transfers and gift cards are harder, but report them to your bank too. Crypto payments usually cannot be reversed: report the wallet address and transaction ID to the exchange you sent from.
- Change any password you entered
If you entered a password on flvto.onl, change it there and anywhere you reused it, and turn on two-factor authentication. Keep screenshots, order confirmations and messages as evidence.
- Report the site
Reports help get scam sites taken down faster and warn other people.
- Report the domain to its registrar
GoDaddy.com, LLC takes abuse reports at abuse@godaddy.com (+1.4806242505). Include the address and what happened.
- Ignore anyone offering to recover your money
"Recovery" services or agents who contact you, or ask for a fee up front, are almost always a second scam aimed at victims. Your bank's dispute process and the official reporting services never charge a fee in advance.
Full answers about refunds and reporting are in the Safety FAQ below.
01 · Investigation Brief
Investigation Brief
flvto.onl is a video-to-audio converter page using the Flvto name. A Japanese security write-up lists flvto.onl among look-alike clones run by third parties for ad revenue. In our own test, pressing the main Convert button opened an unrelated external ad site in a pop-up. The same write-up warns that these clones can lead to fake virus warnings. Technical checks were mostly clean, with one isolated antivirus detection. The ad-driven flow puts the site in High Risk.
What the evidence shows
Clicking CONVERT opened a pop-up to an unrelated external address (hai8g.com) instead of simply starting the conversion. Our screenshot review also recorded the Convert button triggering a pop-up.
A Japanese safety article names flvto.onl among name-alike clones unrelated to the original service. It says these clones are mostly run for advertising income. It also warns that the convert button can open ad tabs or send users to fake 'your phone is infected' malvertising.
The site's own terms say the company is not responsible for third-party links and ads. They also say it has no obligation to provide any support.
Technical checks versus operator risk
The browser threat feed raised no warning and the connection is properly encrypted. The domain is about two years old. One antivirus engine out of 93 flagged the site, with no wider agreement among vendors.
The page lists a phone number and a postal address, but it does not name the operator. The main risk comes from the ad pop-ups tied to the core button, not from the domain itself.
Why the score is 40
A primary play, convert, continue, or download control opened an unrelated external destination. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsFresh result
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 0
- Total
- 93
| Engine | Finding |
|---|---|
| WebrootMalicious | malicious |
All 93 engine results
- Webroot - Malicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- alphaMountain.aiInformation Technology
- BitDefenderbusiness
- Forcepoint ThreatSeekerinformation technology
- Googledownloads_and_sharing
- WebrootComputer and Internet Info
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual warning signs were identified
CONVERT button
What the captured page showed
1 observation- 01
CONVERT button
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
Flvto - YouTube から MP3 コンバーター
- Meta description
FLVTO は、YouTube ビデオを無料で MP3 ファイルにダウンロードできる最高の MP3 コンバーターです。 高品質の音楽を YouTube からあらゆるデバイスに簡単にダウンロードできます。
Pages we read
- Main page/ja/Read
- Terms/terms-of-service/Read
- Contact page/contact-us/Read
03 · Investigation Story
Investigation story
What the site claims
Flvto - YouTube から MP3 コンバーター
What we observed
Saved browser evidence recorded popups.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.
What kind of site and risk is this?
Threat category
Aggressive Ads & Malvertising
Service and business model
Downloader
Observed behavior
Evidence behind this classification
- 01A primary play, convert, continue, or download control opened an unrelated external destination.
- 02The Convert button opened an unrelated external ad pop-up.
- 03One public warning on a scam-warning or security site: "flvto.works・flvto.llc・flvto.mx・flvto.onlといった名前だけ似せたクローンサイトが次々と立ち上がりました。これらは本家の運営とは無関係な第三者が、広告収益を目的に運営しているケースが大半です。"
If this is a scam — what it means for you
What happens when you click Convert
A visitor who presses Convert gets an unrelated external ad page opened in a pop-up.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
Outside research says such clicks can lead to fake virus-infection warnings, a common route to unwanted software.
Avoid this converter. If you do use it, close any pop-up immediately and never install apps or follow virus warnings that it opens.
Web research findings
Independent findings for flvto.onl, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainflvto.onl
- Redirects toflvto.onl
- Hosted byCloudflare, Inc.
- Referencesgoogletagmanager.com · static.cloudflareinsights.com
Domain Timeline
- Sep 18, 2024Domain registered
First appeared in WHOIS records — 2 years old when this review was saved.
- Oct 27, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
flvto.onl is an established domain now carrying threat signals. An older domain that starts tripping security checks is a classic pattern for an asset that was sold, repurposed, or compromised — the age alone is not reassurance.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Phone number listed (1-800-778-7879).
- Postal address visible on the page.
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
Report this domain to its registrar: send the address and what happened to this contact.
Certificate issued for flvto.onl.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Analytics and ads
- Google Tag Manager
- Cloudflare Web Analytics
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
A primary play, convert, continue, or download control opened an unrelated external destination. · 1 independent antivirus family reported an adverse result.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning on a scam-warning or security site: "flvto.works・flvto.llc・flvto.mx・flvto.onlといった名前だけ似せたクローンサイトが次々と立ち上がりました。これらは本家の運営とは無関係な第三者が、広告収益を目的に運営しているケースが大半です。" · The Convert button opened an unrelated external ad pop-up.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Completed | Adverse | fresh · analysed Oct 27, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 27, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 27, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | Adverse | this scan · Oct 27, 2026 |
| Independent research | 2 independent findings were saved | Completed | Adverse | this scan · Oct 27, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionCompletedFindingAdverse
- Freshnessfresh · analysed Oct 27, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 27, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 27, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Oct 27, 2026
- Independent research
- Result2 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Oct 27, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is it safe to download from flvto.onl?
Is flvto.onl safe to use?
Will I get a virus from flvto.onl?
Why does flvto.onl show several "Download" buttons?
Has flvto.onl been flagged by antivirus engines?
Is flvto.onl on any phishing or malware blacklists?
How old is the flvto.onl domain?
Does flvto.onl have a valid SSL certificate?
Where is flvto.onl hosted?
How often is the flvto.onl report updated?
08 · Final Verdict
Final verdict
Flvto clone where the Convert button opens unrelated ad pop-ups
flvto.onl is a video-to-audio converter page using the Flvto name. A Japanese security write-up lists flvto.onl among look-alike clones run by third parties for ad revenue. In our own test, pressing the main Convert button opened an unrelated external ad site in a pop-up. The same write-up warns that these clones can lead to fake virus warnings. Technical checks were mostly clean, with one isolated antivirus detection. The ad-driven flow puts the site in High Risk.
09 · Community
Community
Are you the owner of flvto.onl?Verify and reply