Is kgg2m7yk5aybusll.onion safe?

http://kgg2m7yk5aybusll.onion/

Low RiskStatus

Coveragepartial3 of 5 applicable core capabilities

Verdict

Low risk: a historically documented Invidious onion address with no current threat detections

Historical sources associate this exact onion address with Invidious, while current security checks report no threat warning and no malicious or suspicious detections. The score remains below the Safe range because the available evidence is historical and does not establish the address's present operator or operational status.

Treat this as a legacy address rather than a currently verified official endpoint. Avoid entering sensitive information unless you independently confirm the present address through current Invidious project materials.
Read full analysis
No saved capture is availableThe verdict remains based on the completed checks below.
No antivirus detections across 93 engines
Calibrated safety spectrum

Where this site sits

  1. Dangerous1–20
  2. High Risk21–44
  3. Moderate Risk45–69
  4. Low Risk70–84
  5. Safe85–100

The score combines saved evidence strength and analysis quality. Coverage is reported separately.

01 · Investigation Brief

Investigation Brief

Historical sources associate this exact onion address with Invidious, while current security checks report no threat warning and no malicious or suspicious detections. The score remains below the Safe range because the available evidence is historical and does not establish the address's present operator or operational status.

Historical association with Invidious

A historical announcement explicitly listed kgg2m7yk5aybusll.onion as a Tor address through which users could view Invidious.

A later project discussion referred to the same address as the repository's hidden service and questioned what had happened to it, indicating uncertainty about its later status.

No detected technical threat, but present-day control is unverified

Current reputation checks found no threat warning and returned zero malicious or suspicious detections across 93 engines.

Those clean checks are reassuring but do not establish who currently controls the address. The available project discussion itself raises uncertainty about what happened to the hidden service.

Why the score is 79

The saved checks found no material threat, but the evidence was not strong enough for the highest Safe tier. Coverage remains separate so missing sources cannot be mistaken for clean results.

02 · Security Evidence

Security evidence

Collected signals and independent provider data for this URL.

Antivirus Engines

0/ 93

No detections

Fresh result

No detections across 93 engines

No antivirus engine in this saved scan raised an adverse result. This is one signal, not a guarantee.

Malicious
0
Suspicious
0
Total
93
All 93 engine results
  • 0xSI_f33d - unrated - Clean
  • Abusix - clean - Clean
  • Acronis - clean - Clean
  • ADMINUSLabs - clean - Clean
  • AILabs (MONITORAPP) - clean - Clean
  • AlienVault - clean - Clean
  • alphaMountain.ai - clean - Clean
  • AlphaSOC - unrated - Clean
  • Antiy-AVL - clean - Clean
  • ArcSight Threat Intelligence - unrated - Clean
  • AutoShun - unrated - Clean
  • Bfore.Ai PreCrime - unrated - Clean
  • BitDefender - clean - Clean
  • Bkav - unrated - Clean
  • BlockList - clean - Clean
  • Blueliv - clean - Clean
  • Certego - clean - Clean
  • ChainPatrol - unrated - Clean
  • Chong Lua Dao - clean - Clean
  • CINS Army - clean - Clean
  • CRDF - clean - Clean
  • Criminal IP - clean - Clean
  • CSIS Security Group - unrated - Clean
  • CTX AI - clean - Clean
  • Cyan - unrated - Clean
  • Cyble - clean - Clean
  • CyRadar - clean - Clean
  • desenmascara.me - clean - Clean
  • DNS8 - unrated - Clean
  • Dr.Web - clean - Clean
  • EmergingThreats - clean - Clean
  • Emsisoft - clean - Clean
  • Ermes - unrated - Clean
  • ESET - clean - Clean
  • ESTsecurity - clean - Clean
  • Forcepoint ThreatSeeker - clean - Clean
  • Fortinet - clean - Clean
  • Fortra - unrated - Clean
  • G-Data - clean - Clean
  • GCP Abuse Intelligence - unrated - Clean
  • Google Safe Browsing - clean - Clean
  • GreenSnow - clean - Clean
  • GreyNoise - unrated - Clean
  • Gridinsoft - unrated - Clean
  • Guardpot - unrated - Clean
  • Heimdal Security - clean - Clean
  • Hunt.io Intelligence - unrated - Clean
  • IPsum - clean - Clean
  • Juniper Networks - clean - Clean
  • K7AntiVirus - unrated - Clean
  • Kaspersky - unrated - Clean
  • LevelBlue - clean - Clean
  • Lionic - clean - Clean
  • Lumu - unrated - Clean
  • Malwared - clean - Clean
  • MalwarePatrol - clean - Clean
  • MalwareURL - unrated - Clean
  • Mimecast - unrated - Clean
  • Netcraft - unrated - Clean
  • OpenPhish - clean - Clean
  • Orcapot - unrated - Clean
  • PhishFort - unrated - Clean
  • Phishing Database - clean - Clean
  • Phishtank - clean - Clean
  • PREBYTES - clean - Clean
  • PrecisionSec - unrated - Clean
  • Quick Heal - clean - Clean
  • Quttera - clean - Clean
  • Rising - clean - Clean
  • SafeToOpen - unrated - Clean
  • Sangfor - clean - Clean
  • Sansec eComscan - unrated - Clean
  • Scantitan - clean - Clean
  • SCUMWARE.org - clean - Clean
  • Seclookup - clean - Clean
  • Snort IP sample list - unrated - Clean
  • SOCRadar - unrated - Clean
  • Sophos - clean - Clean
  • StopForumSpam - clean - Clean
  • Sucuri SiteCheck - clean - Clean
  • Synthient - unrated - Clean
  • ThreatHive - clean - Clean
  • URLhaus - clean - Clean
  • URLQuery - unrated - Clean
  • Viettel Threat Intelligence - clean - Clean
  • VIPRE - unrated - Clean
  • ViriBack - clean - Clean
  • VX Vault - clean - Clean
  • Webroot - clean - Clean
  • Xcitium Verdict Cloud - clean - Clean
  • Yandex Safebrowsing - clean - Clean
  • ZeroCERT - clean - Clean
  • ZeroFox - unrated - Clean

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

03 · Investigation Story

Investigation story

The behavior, reputation, and operator evidence that explains how this site may affect a visitor.
  1. What the site claims

    Independent evidence classifies the site as streaming piracy, but the page's own claim could not be captured.

  2. What we observed

    The page itself could not be fully inspected, so the report relies on the other saved checks.

  3. What independent research found

    2 external findings were saved and compared with the page evidence.

  4. What remains unverified

    2 of the 5 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.

What kind of site and risk is this?

Threat category

No threat category confirmed

Service and business model

Streaming Piracy

Free

Observed behavior

No disruptive browser behavior saved

Evidence behind this classification

  1. 01A historical announcement explicitly published this onion address as a way to access Invidious through Tor.
  2. 02A project issue questioned what happened to this hidden service, leaving its later operational status unclear.
  3. 03The URL received no threat warning in the current reputation check.

Web research findings

Independent findings for kgg2m7yk5aybusll.onion, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
No clone detected
The completed research found no supported clone indicator.
Typosquat check
No look-alike match
The completed research found no supported look-alike match.
Web mentions
2 positive
Positive reviews (2)
Public quotes that support the operator's credibility.
  • omar.ytopen

    "I'm now happy to announce that you can now view Invidious through Tor at the following links: ... kgg2m7yk5aybusll.onion"

  • GitHubopen

    "What happened to the ~official~ hidden service of this repo (kgg2m7yk5aybusll.onion), was it replaced by https://invidio.us?"

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗

04 · Evidence Ledger

Evidence ledger

Coverage, provenance, and source freshness remain separate so a missing check is never mistaken for a clean result.
  1. Antiviruscomplete
  2. Browser threat feedcomplete
  3. Page contentnot run
  4. Analysiscomplete
  5. Visual evidenceunavailable
Completed analysis

The conclusion is supported by the evidence saved with this report.

Technical threat

unknown

Malware, phishing, credential theft and hostile infrastructure.

No confirmed evidence in this dimension.

Operator / customer risk

unknown

Complaints, withdrawals, business conduct and commercial traps.

No confirmed evidence in this dimension.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
Result0 of 93 engines flagged
CompletionCompleted
FindingNo adverse finding
Freshnessfresh · Oct 6, 2026
Browser protection
ResultNo browser threat-list match
CompletionCompleted
FindingNo adverse finding
FreshnessNot available
Page content
ResultPage content was not available for semantic review
CompletionUnavailable
FindingNo saved finding
FreshnessNot available
Visual evidence
ResultThe saved page capture was not reliable enough to use
CompletionUnavailable
FindingNo saved finding
FreshnessNot available
Independent research
Result2 independent findings were saved
CompletionCompleted
FindingNo adverse finding
FreshnessNot available

05 · Your Next Move

Your next move

Verify before you trust

We couldn't gather enough signal for a confident verdict — tread carefully.

  1. Find the company through independent channels

    Search for the business on LinkedIn, an official registry (Companies House, OpenCorporates, SEC EDGAR), or via the brand's known social channels. If you can't trace a real entity, that itself is a red flag.

  2. Never pay by crypto, gift card, or bank transfer

    If the site forces an irreversible payment method, stop. Cards and PayPal give you chargeback protection — irreversible methods don't.

  3. Ask the forum

    Post the URL in the MalwareTips Scam Reports forum — experienced members often recognise patterns immediately.

    Open

06 · Safety FAQ

Safety FAQ

Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.

Is kgg2m7yk5aybusll.onion a scam or is it safe?
kgg2m7yk5aybusll.onion has a Safety Score of 79/100 (Low Risk). The saved checks found no material threat, but the report did not meet every requirement for the highest Safe tier. Use normal caution and independently verify the operator before irreversible payments or unusually sensitive actions.
Is kgg2m7yk5aybusll.onion safe to use?
kgg2m7yk5aybusll.onion has a Safety Score of 79/100 (Low Risk). Analysis coverage is partial at 71%. Normal caution; verify sensitive actions.
Has kgg2m7yk5aybusll.onion been flagged by antivirus engines?
No — all 93 antivirus and blocklist engines in our malware network currently report kgg2m7yk5aybusll.onion as clean. That's a good sign, though antivirus coverage is only one of the many signals we weigh, and brand-new scam sites can appear clean before vendors catch up.
Is kgg2m7yk5aybusll.onion on any phishing or malware blacklists?
No — kgg2m7yk5aybusll.onion is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
How often is the kgg2m7yk5aybusll.onion report updated?
This report is a record of the scan run on October 6, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about kgg2m7yk5aybusll.onion has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

07 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.
Verdict score
79/100
Low Risk

Low risk: a historically documented Invidious onion address with no current threat detections

Saved capturekgg2m7yk5aybusll.onionCapture-safe
No saved screenshot was available for this report.
Conclusion

Historical sources associate this exact onion address with Invidious, while current security checks report no threat warning and no malicious or suspicious detections. The score remains below the Safe range because the available evidence is historical and does not establish the address's present operator or operational status.

Recommended actionTreat this as a legacy address rather than a currently verified official endpoint. Avoid entering sensitive information unless you independently confirm the present address through current Invidious project materials.
Saved evidence only

Missing checks are never treated as a clean result.

Scan another URL
Continue toCommunity

08 · Community

Community

First-hand experiences add human context after the scanner has reached its conclusion.