Is fmovies.co.ke legit or a scam?
FMovies piracy clone linked to global malware operation that infected ~1M devices; original network shut down by authorities in 2024.
These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.
Analysis Summary
Fake shop — do not order
FMovies piracy clone linked to global malware operation that infected ~1M devices; original network shut down by authorities in 2024. The site shows patterns common to non-delivery scam shops. Don't submit payment details, and if you already paid by card or PayPal, start a chargeback today.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
The domain fmovies.co.ke is a direct replica of the original FMovies piracy streaming service, which Vietnamese authorities dismantled in August 2024 after discovering it was part of a large-scale malware and infostealer operation. The page uses identical branding, marketing language, and layout to the defunct network. Reddit users and security researchers consistently warn that post-shutdown FMovies clones are either scams, malware vectors, or non-functional mirrors. The original operation infected approximately 1 million devices globally. Although our antivirus engines have not yet flagged this specific domain, the clone-of relationship to a confirmed malware network, combined with public warnings about similar variants, places this in the critical-risk category. The absence of any legitimate business registration, contact information, or legal compliance further confirms this is an illegal streaming operation.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for fmovies.co.ke, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Domain fmovies.co.ke has been active for 3127 days (~8.5 years) according to scanner data, yet a Reddit post flagged it as newly registered with high risk.
- It is a free movie streaming site claiming no ads, no signup, and access to 10,000+ titles, directly mimicking the original FMovies piracy brand.
- Original FMovies network was shut down by Vietnamese authorities in August 2024 with arrests; it has been strongly linked to a global malware/infostealer operation infecting up to 1M devices.
- Reddit users frequently warn that post-shutdown FMovies clones are often scams, contain malware, or deliver broken/non-working streams.
- Similar FMovies variants (e.g. fmovies-co.net) receive low trust scores on ScamAdviser due to recent registration, illegal content, and download risks.
- No official business registration, Trustpilot, or ScamAdviser record found specifically for fmovies.co.ke; general piracy streaming sites carry high malware and legal risks per FTC and security reports.
- Page title and description exactly match common FMovies clone marketing language used across dozens of copycat domains.
- Reddit r/ScamCheckeropen
"is fmovies.co.ke legit or scam? Score: 72/100. Risk Level: High Risk. Domain Age: 1 days. fmovies.co.ke is likely unsafe"
- Wikipedia / Antipiracy Newsopen
"FMovies was shut down by Vietnamese authorities in 2024... Fmovies takedown unmasks global malware operation... nearly one million devices may have been infected"
The site copies the branding, description, and layout of the defunct FMovies piracy network (shut down in 2024). Multiple mirror domains exist; this is one of many copycat streaming sites.
Our research found 2 scam reports and 2 complaints. Reddit users flagged fmovies.co.ke as high-risk and likely unsafe. Antipiracy and security sources confirm that the original FMovies piracy network was dismantled by Vietnamese authorities in August 2024 after being unmasked as a global malware operation infecting approximately 1 million devices with infostealers. Security researchers and Reddit communities consistently warn that post-shutdown FMovies clones are either non-functional scams, malware distributors, or broken mirrors. No legitimate business registration, an independent review aggregator record, or positive reviews were found for this domain. Similar FMovies variants receive low trust scores due to recent registration, illegal content distribution, and documented malware risks.
Scam Network Intelligence
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No phone number listed on the page.
- No postal address visible on the page.
Domain & Encryption
Redirect Chain
- 1301http://fmovies.co.ke/
- 2200https://fmovies.co.ke/
Server Reputation
Scam-Type Likelihood
2 scam-type patterns detected
2 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- AI analyst tagged this as a fake shop.
- No phone number or postal address anywhere on the page.
- Multiple contact / trust-signal red flags on the page.
- AI analyst tagged this as a brand / clone-site impersonation.
- Clustered with known brand-impersonation infrastructure.
2 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- AI analyst tagged this as a fake shop.
- No phone number or postal address anywhere on the page.
- Multiple contact / trust-signal red flags on the page.
- AI analyst tagged this as a brand / clone-site impersonation.
- Clustered with known brand-impersonation infrastructure.
Fake shop — do not order
Signals common to non-delivery scam shops were detected on this site.
- Do not interact with fmovies.co.ke
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
- If you already paid by card or PayPal — start a chargeback
Contact your bank or card issuer and dispute the charge as "goods not received" or "merchant fraud." PayPal users can open a case in the Resolution Centre. Act within 120 days for card chargebacks in most jurisdictions.
- Save every piece of evidence
Screenshots of the checkout, order confirmation emails, any chat transcripts, and the product listing page. Chargeback and fraud reports go faster when you have receipts.
- OpenReport the shop
Report to the FTC (reportfraud.ftc.gov), Action Fraud UK, or your local consumer-protection body. Post the URL on the MalwareTips scam forum so other buyers can find it.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review flags fmovies.co.ke as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
- No — fmovies.co.ke scored 25/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
- Yes. fmovies.co.ke presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 87 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- fmovies.co.ke is 8.6 years old, registered on 11/22/2017. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report fmovies.co.ke as clean.
- No. fmovies.co.ke is not currently listed on the major browser blocklist feeds that modern browsers use.
- fmovies.co.ke resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around fmovies.co.ke have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.