Critical risk detected
6 of 93 antivirus engines flag this page as malicious. Our security stack flagged multiple threat indicators on this website. Don't enter personal information, deposit money, or download files.
Is x1337x.cc legit or a scam?
Official 1337x torrent mirror flagged by 6 antivirus engines and assigned zero trust by independent reviewers; registrar linked to phishing.
These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.
Analysis Summary
MT Intelligence
x1337x.cc is confirmed as an official mirror of the 1337x torrent search engine, added in May 2024 and listed on both Wikipedia and the project's status page. However, the domain exhibits multiple red flags. Six antivirus engines (ADMINUSLabs, Chong Lua Dao, CRDF, CyRadar, Forcepoint ThreatSeeker, and Lumu) classify it as malicious or malware-related. Independent trust aggregators assign it a score of 0/100 and cite phishing reports from IPQS. The registrar, Immaterialism Limited, has been associated with multiple phishing domains according to abuse reports. While the site is a legitimate torrent index with millions of monthly visits, torrent platforms inherently carry risks: malicious ads, potentially infected downloads, and legal exposure. The combination of antivirus detections, zero trust scores, and a registrar with a phishing history creates a high-risk profile despite the site's official status.
Website Preview

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual Screenshot Analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual red flags detected in the screenshot
We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.
What our vision model saw
1 signalScreenshot incomplete — site may be slow to render
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for x1337x.cc, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- x1337x.cc is listed as an official mirror of the 1337x torrent index on both Wikipedia and the project's own status page (added May 2024).
- Domain registered May 27, 2024 (approx. 741 days old as of scan), via privacy-protecting registrar Immaterialism Limited; WHOIS data hidden.
- Scamadviser assigns Trust Score 0/extremely low, citing IPQS reports of phishing and suspicious classification.
- VirusTotal shows 6/91 security vendors flag the domain as malicious.
- Reddit users in r/1337x debate its legitimacy, with some friends calling it "fake" while the official status page promotes it.
- The site is a popular torrent search engine (millions of monthly visits per Semrush/SimilarWeb) but facilitates piracy and carries typical torrent-site risks (ads, potential malware in downloads).
- Registrar Immaterialism Limited has been associated with multiple phishing domains per abuse reports.
- Scamadviseropen
"This website was reported by IPQS for phishing. This website has been classified as suspicious by IPQS. In summary, the trust score of x1337x.cc is extremely low. This is a strong indicator that the website may be a scam."
- VirusTotalopen
"6/91 security vendors flagged this domain as malicious."
- Reddit r/1337xopen
"I started using x1337x.cc but some of my friend told me its fake."
Registered 2024-05-27 via Immaterialism Limited (registrar immateriali.sm); WHOIS hidden; expires 2027-05-27. Registrar linked to multiple phishing domains.
Our web research found conflicting signals. Scam-report aggregators and IPQS classify x1337x.cc as phishing with a trust score of 0/100. Reddit users in r/1337x debate its legitimacy, with some reporting friends calling it 'fake.' However, Wikipedia lists it as an official mirror, and the 1337x project status page confirms it was added in May 2024 as a new official mirror after another domain expired. The site is a popular torrent search engine with millions of monthly visits, but torrent platforms carry inherent risks including malicious ads and potentially infected downloads.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Server Reputation
Scam-Type Likelihood
1 scam-type patterns detected
0 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- AI analyst tagged this as malware / drive-by / cracked app.
0 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- AI analyst tagged this as malware / drive-by / cracked app.
Malware distribution detected
Signals suggest this page may deliver malicious files or exploit the browser.
- Do not interact with x1337x.cc
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
- If you downloaded or ran a file from here
Disconnect the device from the internet, run a full scan with a reputable antivirus (Malwarebytes, ESET, Bitdefender), and consider a second-opinion scanner. Change passwords on any account you used from the device afterwards — ideally from a different device.
- OpenGet free cleanup help
MalwareTips has a dedicated malware-removal team who walk you through cleanup one-on-one.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.
- Our automated security review flags x1337x.cc as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
- No — x1337x.cc scored 17/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
- Yes. x1337x.cc presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 63 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- x1337x.cc is 2.0 years old, registered on 5/27/2024 through Immaterialism Limited. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- 7 out of 93 antivirus engines in our malware network flagged x1337x.cc as malicious or suspicious (6 outright malicious). Even one detection is a meaningful signal.
- No. x1337x.cc is not currently listed on the major browser blocklist feeds that modern browsers use.
- x1337x.cc resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Independent trust-rating sites currently show the following for x1337x.cc: ScamAdviser: 100/100. Those scores come from user reviews and their own heuristics, so they are worth comparing against our verdict.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.