MalwareTipsTools

Lost money to lfmx.app? Warn othersLost money here? Warn othersRate it · review · follow updates

Rate lfmx.app

One tap is enough. Reviews are moderated and never change our Safety Score.

Is lfmx.app safe?

http://lfmx.app/

Moderate RiskStatus
Community ratingNo reviews yet · Write oneCommunity reviews are separate from our Safety Score.

Checked on

How we checked

Coverage: partial · 4 of 6 applicable core capabilities

  • Antivirus (57 of 93 engines answered) · saved result: did not fully complete
  • Google Safe Browsing: completed
  • page reading · not available: did not fully complete
  • page capture · limited: did not fully complete
  • domain records: completed
  • web research: completed
Verdict

lfmx.app redirects to a free movie/TV/anime streaming host on a three-month-old domain whose own pages never load for review

Visiting lfmx.app lands on moanatv.lfmx.app, described in third-party records as a site that streams movies, TV shows and anime for free. Every attempt to read the site returned HTTP 403 and a Cloudflare 'Verify you are human' challenge, so no About page, contact channel, terms or ownership statement could be reviewed. The domain was registered on 30 July 2026 and is about three months old, and no malware, phishing or certificate problem was detected. Because the site's own pages could not be read and it has no established reputation, the score is capped at Moderate Risk rather than Low Risk.

Treat lfmx.app as an unverified free streaming site. If you use it, expect intrusive advertising and avoid entering account credentials, card details or any payment information, since no operator, terms or contact channel could be confirmed. Use a browser with an ad and script blocker, and do not install anything the site prompts you to download.

Tell us the verdict looks wrong

lfmx.app · Staff read every report. Your message is never published, and feedback never changes the score automatically.

What looks wrong?

Share this report

lfmx.app: Moderate Risk — MalwareTips website safety report

At a glance

Saved with this scan; each value is explained in the sections below.

  • Domain age

    3 months old

    Registered Jul 30, 2026Expires Jul 30, 2027
  • Certificate

    Valid

    Expires Dec 26, 2026 (44d)
  • Hosting

    United States (US)

    Cloudflare, Inc.
  • Popularity

    Not in the Cloudflare Radar top list

  • Antivirus

    0/57

    Saved antivirus result from Nov 3, 2026: no detections across 57 engines
  • Safe Browsing

    Not flagged

    Not flagged on major threat lists
  • Community

    No reviews yet

  • Checked

    Nov 12, 2026

Calibrated safety spectrum

Where this site sits

  1. Dangerous1–20
  2. High Risk21–44
  3. Moderate Risk45–69
  4. Low Risk70–84
  5. Safe85–100

The score combines saved evidence strength and analysis quality. Coverage is reported separately.

Score explained

Why 55/100

Moderate Risk covers scores 45–69. 4 findings pulled the score down; 1 pushed it up.

What pulled the score down

  1. Moderate2 independent sources carry complaints or warnings about this site, including: "原始页面标题 moanatv. 原始描述 Stream movies, TV shows, and anime for free."-19 pts
  2. Moderate2 independent sources carry complaints or warnings about this site, including: "Scam Score: 89 / 100 BETA Strong Risk Factors detected. Recommendation: Avoid using this site."-18 pts
  3. MinorEvery request to the site returned HTTP 403 and a Cloudflare human-verification challenge, so its About, contact, terms and policy text was never reviewed.
  4. MinorThe domain was registered on 30 July 2026 and is about three months old, with ownership details withheld.

What pushed the score up

  • SupportsSafe Browsing returned no warning, TLS is valid and the hosting IP has an abuse confidence of 0/100.

Points come from the saved evidence ledger: it lowered the score from 92 to 55 and split those 37 points between the findings that show points; the others carry no points in the ledger.

01 · Investigation Brief

Investigation Brief

Visiting lfmx.app lands on moanatv.lfmx.app, described in third-party records as a site that streams movies, TV shows and anime for free. Every attempt to read the site returned HTTP 403 and a Cloudflare 'Verify you are human' challenge, so no About page, contact channel, terms or ownership statement could be reviewed. The domain was registered on 30 July 2026 and is about three months old, and no malware, phishing or certificate problem was detected. Because the site's own pages could not be read and it has no established reputation, the score is capped at Moderate Risk rather than Low Risk.

A redirect to a free streaming host that blocks inspection

The bare address forwards to the subdomain moanatv.lfmx.app, and the screenshot of that destination shows only a Cloudflare interstitial headed with the subdomain name, a 'Performing security verification' message and a 'Verify you are human' checkbox. No catalogue, prices, account form or contact link was visible.

The first request and a retry both returned HTTP 403, so the site's own page, contact, About and policy text was never reviewed. Third-party records describe the destination as 'moanatv' with the description 'Stream movies, TV shows, and anime for free', which is the only substantive description of what the site offers.

The registrable domain was registered through Name.com on 30 July 2026 and ownership details are not published, leaving roughly three months of operating history to judge.

Clean technical checks, unverified operator

The browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0 out of 100 across 26 saved reports. Nothing in the technical layer indicates malware, phishing or a broken certificate.

Those results say nothing about who runs the site. With every page blocked, there is no company name, address, contact mailbox or terms text to check, and no way to confirm whether the streaming catalogue is licensed or whether an account or payment is ever requested.

One external scanner assigns the domain a high risk score and advises avoiding it, while another record simply notes the 403 'Just a moment...' challenge page. Neither replaces a reading of the site itself, and the high score is not backed by a described detection in the material available.

Why the score sits at Moderate Risk

The score is limited to 69 because the site's pages could not be read and nothing establishes its reputation: the domain is only about three months old and no independent review or archive history supports it. Clean security checks alone cannot lift a site whose operator, terms and content sourcing are all unknown.

The score is not lower because no concrete harm was observed: no malware detection, no phishing page, no cross-domain checkout, no popups or download prompts, and the redirect chain stays on the same domain. The unresolved question is licensing and accountability on a free streaming site with no visible owner, not a demonstrated fraud.

02 · Security Evidence

Security evidence

Antivirus Engines

0/ 93

No detections

Saved analysis from November 3, 2026 - stale

No detections across 57 engines that rated this URL

No antivirus engine that answered raised an adverse result; 36 had no rating for this URL. This is one signal, not a guarantee.

Malicious
0
Suspicious
0
Total
93
  • Clean57
  • Undetected36

All 93 engine results

  • 0xSI_f33d - Unrated
  • Abusix - Clean
  • Acronis - Clean
  • ADMINUSLabs - Clean
  • AILabs (MONITORAPP) - Clean
  • AlienVault - Clean
  • alphaMountain.ai - Clean
  • AlphaSOC - Unrated
  • Antiy-AVL - Clean
  • ArcSight Threat Intelligence - Unrated
  • AutoShun - Unrated
  • Bfore.Ai PreCrime - Unrated
  • BitDefender - Clean
  • Bkav - Unrated
  • BlockList - Clean
  • Blueliv - Clean
  • Certego - Clean
  • ChainPatrol - Unrated
  • Chong Lua Dao - Unrated
  • CINS Army - Clean
  • CRDF - Clean
  • Criminal IP - Clean
  • CSIS Security Group - Unrated
  • CTX AI - Clean
  • Cyan - Unrated
  • Cyble - Clean
  • CyRadar - Clean
  • desenmascara.me - Clean
  • DNS8 - Unrated
  • Dr.Web - Clean
  • EmergingThreats - Clean
  • Emsisoft - Clean
  • Ermes - Unrated
  • ESET - Clean
  • ESTsecurity - Clean
  • Forcepoint ThreatSeeker - Unrated
  • Fortinet - Clean
  • Fortra - Unrated
  • G-Data - Clean
  • GCP Abuse Intelligence - Unrated
  • Google Safe Browsing - Clean
  • GreenSnow - Clean
  • GreyNoise - Unrated
  • Gridinsoft - Unrated
  • Guardpot - Unrated
  • Heimdal Security - Clean
  • Hunt.io Intelligence - Unrated
  • IPsum - Clean
  • Juniper Networks - Clean
  • K7AntiVirus - Unrated
  • Kaspersky - Clean
  • LevelBlue - Clean
  • Lionic - Clean
  • Lumu - Unrated
  • Malwared - Clean
  • MalwarePatrol - Clean
  • MalwareURL - Unrated
  • Mimecast - Unrated
  • Netcraft - Unrated
  • OpenPhish - Clean
  • Orcapot - Unrated
  • PhishFort - Unrated
  • Phishing Database - Clean
  • Phishtank - Clean
  • PREBYTES - Clean
  • PrecisionSec - Unrated
  • Quick Heal - Clean
  • Quttera - Clean
  • Rising - Clean
  • SafeToOpen - Unrated
  • Sangfor - Clean
  • Sansec eComscan - Unrated
  • Scantitan - Clean
  • SCUMWARE.org - Clean
  • Seclookup - Clean
  • Snort IP sample list - Unrated
  • SOCRadar - Unrated
  • Sophos - Clean
  • StopForumSpam - Clean
  • Sucuri SiteCheck - Clean
  • Synthient - Unrated
  • ThreatHive - Clean
  • URLhaus - Clean
  • URLQuery - Unrated
  • Viettel Threat Intelligence - Clean
  • VIPRE - Unrated
  • ViriBack - Clean
  • VX Vault - Clean
  • Webroot - Clean
  • Xcitium Verdict Cloud - Unrated
  • Yandex Safebrowsing - Clean
  • ZeroCERT - Clean
  • ZeroFox - Unrated

How security vendors categorise this site

  • Googletechnology

Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

What we observed

Visual analysis

Visual context from the captured page

The screenshot shows a Cloudflare interstitial headed 'moanatv.lfmx.app' with 'Performing security verification' and a 'Verify you are human' checkbox; no site content, products, prices or CTAs are visible. The page heading displays the subdomain 'moanatv.lfmx.app', confirming the redirect destination from lfmx.app. Footer shows 'Ray ID: a595bc9a08cd42a3' and 'Performance and Security by Cloudflare', indicating the page is a Cloudflare-generated challenge rather than the site's own content.

Context only

What the captured page showed

3 observations
  1. 01

    The screenshot shows a Cloudflare interstitial headed 'moanatv.lfmx.app' with 'Performing security verification' and a 'Verify you are human' checkbox; no site content, products, prices or CTAs are visible.

  2. 02

    The page heading displays the subdomain 'moanatv.lfmx.app', confirming the redirect destination from lfmx.app.

  3. 03

    Footer shows 'Ray ID: a595bc9a08cd42a3' and 'Performance and Security by Cloudflare', indicating the page is a Cloudflare-generated challenge rather than the site's own content.

Browser behavior

What our isolated browser recorded while it loaded the page. Host names only: no full addresses are published.

Pop-ups
0
Download attempts
0
Notification prompts
0
Navigations
2
Other hosts contacted
2
Where the page went
  1. First loadmoanatv.lfmx.appSame site
  2. On its ownmoanatv.lfmx.appSame site
Hosts on our aggressive-advertising list

None contacted.

Test clicks

No test click was made on this page.

03 · Investigation Story

Investigation story

  1. What the site claims

    Independent evidence classifies the site as streaming piracy, but the page's own claim could not be captured.

  2. What we observed

    The page itself could not be fully inspected, so the report relies on the other saved checks.

  3. What independent research found

    6 external findings were saved and compared with the page evidence.

  4. What remains unverified

    2 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.

What kind of site and risk is this?

Threat category

No threat category confirmed

Service and business model

Streaming Piracy

Unknown

Observed behavior

No disruptive browser behavior saved

Evidence behind this classification

  1. 01Footer shows 'Ray ID: a595bc9a08cd42a3' and 'Performance and Security by Cloudflare', indicating the page is a Cloudflare-generated challenge rather than the site's own content.
  2. Also 5 listed under Why 55/100 above

Web research findings

Independent findings for lfmx.app, including public complaints, named review sources, registration records, and look-alike-domain evidence.

Not checked
Not run for this report
Company-registry lookup, site-clone comparison and look-alike domain comparison.
Web mentions
2 complaints or warnings
Complaints and warnings (2)
Direct quotes from public complaints, negative reviews, warnings and security listings.
  • WebSafelyopen

    "Scam Score: 89 / 100 BETA Strong Risk Factors detected. Recommendation: Avoid using this site."

  • Gridinsoftopen

    "原始页面标题 moanatv. 原始描述 Stream movies, TV shows, and anime for free."

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.

Infrastructure map

  1. Domainlfmx.app
  2. Redirects tomoanatv.lfmx.app
  3. Hosted byCloudflare, Inc.

Domain Timeline

  1. Jul 30, 2026
    Domain registered

    First appeared in WHOIS records — 3 months old when this review was saved.

  2. Nov 12, 2026
    Saved security review — Rated Moderate Risk

    The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.

lfmx.app was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.

Domain & Encryption

Domain History
Age3 months old
RegistrarName.com, Inc.
Registrar IANA ID625
RegisteredJul 30, 2026
ExpiresJul 30, 2027
Registered Jul 30, 2026Expires Jul 30, 2027

At the scan on Nov 12, 2026: 29% of the registration period had passed

Last updatedAug 4, 2026
RegistrantNot published (privacy or GDPR redaction)
Owner privacyUnknown (owner not published)
Nameserversmerlin.ns.cloudflare.comryleigh.ns.cloudflare.comDNS by Cloudflare

Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.

Registrar abuse contactabuse@name.com · +1.7203101849
Verified ownerNo owner has verified this domain on MalwareTips
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
IssuedSep 27, 2026 (45 days before this scan)
ExpiresDec 26, 2026 (44d)
Valid from Sep 27, 2026Valid to Dec 26, 2026

At the scan on Nov 12, 2026: 51% of the validity period had passed

Self-signedNo
Trusted chainYes: our check verified the issuer chain
Matches hostnameYes

Certificate issued for lfmx.app.

Hosting & Technology
HostingCloudflare, Inc.
Server IP172.64.80.1 · shared Cloudflare edge

A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.

Server locationUnited States (US)
PopularityNot in the Cloudflare Radar top list

Redirect Chain

Hops
2
Cross-domain
No
Lookalike
No
Punycode
No

The site refused our redirect check, so this chain may be incomplete.

lfmx.app301
lfmx.app301
moanatv.lfmx.app403
  • 1301http://lfmx.app/
  • 2301https://lfmx.app/
  • 3403https://moanatv.lfmx.app/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file26
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Grouped by what each domain is for. in page: named in the page’s HTML. contacted: the browser loaded it while rendering the page. ad list: on our aggressive-advertising list.

Security checks2

05 · Evidence Ledger

Evidence ledger

  1. Antiviruspartial
  2. Browser threat feedcomplete
  3. Page contentunavailable
  4. Analysiscomplete
  5. Visual evidencepartial
Completed analysis

The conclusion is supported by the evidence saved with this report.

Technical threat

unknown

Malware, phishing, credential theft and hostile infrastructure.

No confirmed evidence in this dimension.

Operator / customer risk

suspicious

Complaints, withdrawals, business conduct and commercial traps.

All 4 listed under Why 55/100 above

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
Result0 of 93 engines flagged
CompletionLimitedFindingNo saved finding
Freshnessstale fallback · analysed Nov 3, 2026
Browser protection
ResultNo browser threat-list match
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 12, 2026
Page content
ResultPage content was not available for semantic review
CompletionUnavailableFindingNo saved finding
FreshnessNot available
Visual evidence
ResultThe site showed a challenge page instead of its content; 3 visible observations saved
CompletionLimitedFindingNo saved finding
Freshnessthis scan · Nov 12, 2026
Independent research
Result6 independent findings were saved
CompletionCompletedFindingAdverse
Freshnessthis scan · Nov 12, 2026

06 · Your Next Move

Your next move

Proceed with caution

The evidence is mixed or incomplete, so treat this site as unverified until you can confirm who runs it.

  1. Analyst recommendation

    Treat lfmx.app as an unverified free streaming site. If you use it, expect intrusive advertising and avoid entering account credentials, card details or any payment information, since no operator, terms or contact channel could be confirmed. Use a browser with an ad and script blocker, and do not install anything the site prompts you to download.

  2. Treat lfmx.app as unverified

    Do not enter credentials or send money until you have independently verified the business.

  3. Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  4. Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  5. Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

07 · Safety FAQ

Safety FAQ

Answered from the saved verdict and evidence in this report.

Is lfmx.app a scam or is it safe?
There isn't enough evidence yet for us to give lfmx.app a confident verdict, so treat it with caution. The domain is 3 months old — recently-registered sites carry more risk. Until it can be independently verified, don't enter passwords, card details, or send money, and confirm the company through channels you find yourself rather than links on the site.
Is lfmx.app safe to use?
lfmx.app has a Safety Score of 55/100 (Moderate Risk). Analysis coverage is partial at 64%. Do not trust blindly; analysis may be limited.
Has lfmx.app been flagged by antivirus engines?
No — all 57 antivirus and blocklist engines in our malware network that rated it reported lfmx.app as clean in the saved analysis from November 3, 2026. 36 other engines had no rating for it. That's a good sign, though antivirus coverage is only one of the many signals we weigh, and brand-new scam sites can appear clean before vendors catch up.
Is lfmx.app on any phishing or malware blacklists?
No — lfmx.app is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
How old is the lfmx.app domain?
lfmx.app is 3 months old, registered on July 30, 2026 through Name.com, Inc. Scam sites are very often freshly registered and short-lived, so an age under six months is a reason for extra caution.
Does lfmx.app have a valid SSL certificate?
Yes — lfmx.app presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, valid for another 44 days. A certificate only encrypts the connection; it does not show who runs the site.
Where is lfmx.app hosted?
lfmx.app resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
How often is the lfmx.app report updated?
This report is a record of the scan run on November 12, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about lfmx.app has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

08 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.
Verdict score
55/100
Moderate Risk

lfmx.app redirects to a free movie/TV/anime streaming host on a three-month-old domain whose own pages never load for review

Saved capturelfmx.appCapture-safe
The site showed a challenge page instead of its content. Opening this report does not revisit the site.
Conclusion

Visiting lfmx.app lands on moanatv.lfmx.app, described in third-party records as a site that streams movies, TV shows and anime for free. Every attempt to read the site returned HTTP 403 and a Cloudflare 'Verify you are human' challenge, so no About page, contact channel, terms or ownership statement could be reviewed. The domain was registered on 30 July 2026 and is about three months old, and no malware, phishing or certificate problem was detected. Because the site's own pages could not be read and it has no established reputation, the score is capped at Moderate Risk rather than Low Risk.

Recommended actionTreat lfmx.app as an unverified free streaming site. If you use it, expect intrusive advertising and avoid entering account credentials, card details or any payment information, since no operator, terms or contact channel could be confirmed. Use a browser with an ad and script blocker, and do not install anything the site prompts you to download.
Saved evidence only

Missing checks are never treated as a clean result.

Scan another URL
Continue toCommunity

09 · Community

Community

Are you the owner of lfmx.app?Verify and reply