SUSPICIOUS

Piracy site — expect aggressive ads

Piracy archive site kemono.su flagged by Malwarebytes and ANY.RUN for spreading malicious files through its subdomains. This looks like a pirate streaming / free-movie site. It isn't a scam that takes your money directly, but it bombards you with pop-ups, fake players, survey walls, and malicious ads that can install PUPs or unwanted extensions. Run an ad-blocker, don't install anything it prompts for, and deny notification requests.

Security Review

Is kemono.su legit or a scam?

Our verdict:Suspicious· 46/100

Piracy archive site kemono.su flagged by Malwarebytes and ANY.RUN for spreading malicious files through its subdomains.

kemono.suScanned 2h ago
0
Trust score
SUSPICIOUS
Score breakdown
Heuristics 70·MT 20
Category tags
piracymalware#malware75% MT confidence
Technical red flags (1)
1 of 92 engines flagged
Positive signals (1)
Not on major blacklists

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
1/92
Engines flagged this URL
Domain Age
Registration date unknown
Intelligence
Dangerous
High likelihood · 75% confidence

Website Preview

Live view unavailable

The site returned a server error when we tried to load it in our sandbox, so there was no page to capture. A working business almost always renders — treat this site as unverified.

kemono.su

We attempt a live render of every scanned site in a safe sandbox. This one couldn’t be reached — the failure itself is a signal, noted in the analysis below.

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

50
/ 100
High visual risk

Visual red flags detected in the screenshot

We could not load a live view of this site; the capture returned a server error.

Visual risk50/100

What our vision model saw

1 signal

Live capture returned a server/proxy error — the page could not be rendered

Intelligence

Advanced threat intelligence
Analysis
High scam likelihoodengineMT · Guardiantrust20/100
MT AgentLive web researchVisual inspection
0%
Confidence
The site operates as a public archiver for paywalled creator content, which places it in a legal gray area. Malwarebytes blocked the subdomain c2.kemono.su specifically for spreading malicious files. ANY.RUN sandbox analysis returned a malicious activity verdict on the domain. The domain itself is over two years old and receives millions of visits, yet user reports on Reddit mention malware warnings when attempting downloads. Mixed trust scores across review sites reflect the tension between its popularity and the documented security risks.
Full dossier
Analysis complete

Page Content

The site functions as a community-driven archive that mirrors content from Patreon, Pixiv Fanbox, Fantia, and Discord. It does not impersonate any legitimate brand and instead operates openly as a piracy platform. No checkout or credential-harvesting forms were observed.

Infrastructure

The domain is registered through the Russian registrar RUCENTER-SU under a privacy-protected 'Private Person' listing. Name servers point to terradns.org. One of 92 antivirus engines flagged the page, specifically Chong Lua Dao marking it malicious. Browser blocklists returned clean results.

Domain History

The domain was registered on 2022-08-25 and expires in 2027. It has remained active for over two years with consistent operation despite occasional downtime and domain migrations reported by users.

Web Reputation

Four scam reports were located, including Malwarebytes linking a subdomain to riskware distribution and ANY.RUN confirming malicious activity. ScamMinder assigned a low trust score of 10/100. Three positive mentions exist on other aggregators, though these appear to focus on the main domain rather than subdomains used for file distribution.

What this means for you

Accessing kemono.su carries documented malware risks, particularly when downloading files from its subdomains. The combination of piracy operation and confirmed malicious file distribution makes this site unsafe for general use.

Risk Factors
4
  • Malwarebytes blocked subdomain c2.kemono.su for spreading malicious files.
  • ANY.RUN sandbox returned a malicious activity verdict on the domain.
  • Reddit users report malware warnings when attempting to access or download from the site.
  • ScamMinder assigned a low trust score of 10/100.
Positive Signals
3
  • Domain registered in August 2022 with registration through 2027.
  • Receives millions of monthly visits according to traffic data.
  • Three positive trust mentions found on independent review aggregators.
AI Recommendation
Avoid visiting kemono.su and especially avoid downloading any files from its subdomains due to confirmed malware distribution risks.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for kemono.su, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
4 scam reports · 3 positive
Key findings
7 headline facts from open-web research
  • kemono.su is a public content archiver/mirror for paywalled platforms including Patreon, Pixiv Fanbox, Discord, Fantia, and others; it is community-driven and widely discussed on r/Piracy and GitHub.
  • Domain registered on 2022-08-25 (expires 2027-08-25) to a 'Private Person' with privacy protection through Russian registrar RUCENTER-SU; name servers ns1.terradns.org and ns2.terradns.org.
  • Malwarebytes blocks subdomain c2.kemono.su due to association with riskware and spreading malicious files.
  • ANY.RUN sandbox analysis of kemono.su returned 'Malicious activity' verdict (June 2024).
  • Site and related domains (kemono.party, kemono.cr) have experienced frequent downtime, update failures, and domain changes; users report malware warnings when accessing.
  • Receives millions of monthly visits (Semrush: ~4.28M in May 2026) and has dedicated downloaders on GitHub; operates in legal gray area of copyright infringement/piracy.
  • Mixed scanner results: low trust on ScamMinder (10/100), higher on ScamDoc (86%); Reddit users debate safety of downloads due to user-uploaded content risks.
Scam reports (4)
Direct quotes from public scam databases, forums, and news.
  • Malwarebytesopen

    "The subdomain c2.kemono.su of the domain kemono.su was blocked by Malwarebytes because it is associated with riskware. This subdomain has been used to spread malicious files."

  • ANY.RUNopen

    "Malware analysis kemono.su Malicious activity. Verdict: Malicious activity."

  • ScamMinderopen

    "kemono.su is a scam. This public archiver has been flagged by ScamMinder with a low trust score of 10/100."

  • Reddit r/Piracyopen

    "the sit won't work on my computer, it only get a malware warning message and a whit/black screen if i go to the site anyway."

Positive reviews (3)
Quotes indicating the site is legitimate.
  • ScamDocopen

    "Kemono.su reviews | Good Trust Score: 86%. Low risk. The domain name of this site is old: this is often a good indicator."

  • Checksite AIopen

    "Is kemono.su safe? Likely Safe. Google indicate that no malicious or unsafe content was found on this platform in relation to scams, malware, or unwanted software."

  • Scamadviser (subdomains)open

    "n3.kemono.su ... very likely not a scam but legit and reliable. n1.kemono.su ... legit and safe for consumers to access."

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Malwarebytes blocked the subdomain c2.kemono.su for distributing riskware and malicious files. ANY.RUN sandbox analysis returned a malicious activity verdict. ScamMinder flagged the site with a low trust score of 10/100. Reddit users in r/Piracy reported malware warnings and access issues. Three positive mentions appear on other review aggregators noting the domain age as a trust factor.

Threat Detection

Antivirus Engines

Detection matrix · live
1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

1Malicious0Suspicious59Harmless92Engines
0
of 92
Chong Lua Dao
Malicious· malicious

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 21 categories showed signals

We check every URL against 21 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Piracy Site — High-Risk Ads
Piracy Site — High-Risk Ads
High likelihood
80/100
  • Tagged as a streaming-piracy site.
  • Piracy / free-streaming language detected.

What to do

Piracy site — heavy ads

This is a pirate streaming or download site. The main risk is malvertising — dangerous ads, pop-ups, fake players, and survey walls — not a scam that takes your money.

  • Treat kemono.su as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Use an ad-blocker — and never install a "player" or "codec"

    The pop-ups, fake "download" buttons, and "missing codec" prompts on these sites install PUPs, adware, or unwanted browser extensions. A good ad-blocker removes most of the danger; never install anything the site itself offers.

  • Deny notification prompts and skip "human verification" surveys

    "Allow notifications" leads to spam and scam pop-ups, and "verify you're human" / survey walls are how these sites monetise you — they never actually unlock anything. Close them.

  • If you installed something or see new pop-ups, scan for PUPs

    Run a reputable anti-malware / adware scan (e.g. Malwarebytes), remove unknown browser extensions, and reset notification permissions in your browser settings.

Final Verdict

0
Trust / 100
Final Verdict·kemono.su
SUSPICIOUS

Kemono.su is a piracy archive site that mirrors paywalled content from Patreon and similar platforms. Multiple security vendors have flagged subdomains for distributing riskware and malware.

Avoid visiting kemono.su and especially avoid downloading any files from its subdomains due to confirmed malware distribution risks.

AV engines
92
Domain age
Flagged
1
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • kemono.su is a pirate streaming / download site — it's not a scam that takes your money, but it's high-risk because of the ads. Expect aggressive pop-ups, fake video players, fake "download" and "codec" buttons, "verify you're human" surveys, and malicious ads that can push PUPs, adware, and unwanted browser extensions or notification spam. It's usable with a solid ad-blocker, but never install any "player" or "codec" it prompts for.
  • Proceed with caution — kemono.su scores 46/100 on our trust scale. We found enough warning signals to recommend verifying it through independent channels before entering credentials or money.
  • Just loading the page is lower-risk than what the site tries to get you to DO. The real danger on kemono.su is the ads and pop-ups — fake "download" buttons, "your player is out of date" prompts, and "allow notifications" requests that install PUPs, adware, or unwanted browser extensions. With an ad-blocker, and by never installing anything the site offers or allowing its notifications, the malware risk drops sharply. If you already installed a "player" or "codec" or started seeing pop-ups, run a reputable anti-malware scan and remove any unknown browser extensions.
  • That's the business model. Free pirate streaming and download sites make their money from ads, and the most profitable ads are the aggressive kind — pop-ups, pop-unders, fake video players, and fake "download" buttons. Many are malvertising: ads that try to install PUPs, adware, or browser extensions, or push you into "allow notifications" spam. A good ad-blocker removes most of them; without one, the site is genuinely risky.
  • Streaming or downloading copyrighted movies and shows from a site like kemono.su is copyright infringement and is illegal in most countries — even if you never save the file. On safety: the site won't charge your card, but its ads can expose you to PUPs, adware, fake "update" prompts, and scam pages. If you use it, run an ad-blocker, never install a "player" or "codec" it offers, and deny notification requests. Safer, legal options (including free, ad-supported services) are the better choice.
  • Yes. 1 of 92 antivirus and blocklist engines in our malware network flagged kemono.su, 1 of them as outright malicious. Even a single detection from a reputable engine is a meaningful warning, and multiple detections rarely happen by accident.
  • No — kemono.su is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
  • This report is a record of the scan run on July 10, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about kemono.su has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.