Is y2mate.is a scam or a legit site?

y2mate.is is a scareware / fake-pop-up page — the kind that flashes "Congratulations, you won!" or "Your device is infected!" alerts to push adware, browser-notification spam, unwanted extensions, or a fake support number. 2 of 92 security engines flag it (1 as outright malicious). None of it is real — you didn't win, your device isn't infected, and its "Allow", "Download", and "Call" buttons all lead to junkware or a scam. Close the tab: don't click anything, don't allow notifications, and never call a number it shows.

Is y2mate.is safe to use?

Proceed with caution — y2mate.is scores 46/100 on our trust scale. We found enough warning signals to recommend verifying it through independent channels before entering credentials or money.

Did y2mate.is give me a virus or "infect" my device?

Almost certainly not from just loading it. y2mate.is shows fake "you won a prize" or "your device is infected" pop-ups to scare or tempt you into clicking — the pop-up itself is the trick, not a real infection or a real prize. The danger is what happens if you act on it: clicking "Allow" turns on spam desktop notifications, and "Download", "Update", or "Scan now" buttons install adware, unwanted extensions, or PUPs. If you only saw the pop-ups and closed the tab, you're fine. If you clicked "Allow", block the site under your browser's Notifications settings; if you installed or downloaded anything, remove it and run a reputable free adware/malware cleaner (e.g. Malwarebytes). And never call a "support" number shown in a pop-up — that's a scam.

y2mate.is says I won a prize or my device is infected — is it real?

No. The "Congratulations, you won!" and "Your device is infected!" pop-ups on y2mate.is are fake — an automated ad-network page shows the same message to everyone who lands on it. You didn't win anything, and nothing actually scanned your device. The whole point is to get you to click: "Claim", "Allow", "Download", and "Call" all lead to adware, spam notifications, junk browser extensions, or a fake-support phone scam. Close the tab and don't click anything on the page.

How do I stop the pop-ups or notifications from y2mate.is?

If you're getting pop-ups even after closing the page, you probably clicked "Allow" on a notification prompt — the spam now comes from your browser, not the site. Open your browser settings → Site Settings → Notifications, find y2mate.is (and anything else you don't recognise), and set it to Block or remove it. Then uninstall any extension, "player", or app you added because of the page, and run a reputable free adware/malware cleaner (e.g. Malwarebytes) to clear leftover PUPs.

Has y2mate.is been flagged by antivirus engines?

Yes. 2 of 92 antivirus and blocklist engines in our malware network flagged y2mate.is, 1 of them as outright malicious. Even a single detection from a reputable engine is a meaningful warning, and multiple detections rarely happen by accident.

Is y2mate.is on any phishing or malware blacklists?

No — y2mate.is is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.

How old is the y2mate.is domain?

y2mate.is is 5.9 years old, registered on August 17, 2020. A multi-year registration history is one of the stronger signals against a scam, though it's never a guarantee on its own — established domains can still be misused.

Does y2mate.is have a valid SSL certificate?

Yes — y2mate.is presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, valid for another 55 days. Important caveat: SSL only encrypts the connection between you and the site — it does not verify who runs it. Almost all scam sites now have valid SSL too, so a padlock alone never means "safe".

Where is y2mate.is hosted?

y2mate.is resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.

How often is the y2mate.is report updated?

This report is a record of the scan run on July 16, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about y2mate.is has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

SUSPICIOUS

Fake pop-up / scareware warning signs

2 of 92 antivirus engines flag this page. This looks like a fake-prize / fake-alert pop-up page used to push adware, push-notification spam, or unwanted software. Don't click "Allow" on notification prompts, don't install anything it offers, and close the tab rather than following any "claim" or "fix" button.

Security Review

Is y2mate.is legit or a scam?

Be careful — we couldn't verify this site.

Do this now:don't sign in or pay until you've confirmed the site is genuine another way.

YouTube video downloader that loads third-party ad domains and has multiple reports of intrusive pop-up ads and notification spam.

Cross-checked against 11 completed checks — 2 raised a concern

Open-web research was partially available; the verdict uses the other completed checks.

Top reasons

One antivirus engine flags the page as malicious and another marks it as spam.Three user complaints on independent review sites describe intrusive pop-up ads that block normal use.Security analysis links the site to browser notification spam and deceptive permission prompts.

y2mate.isScanned Jul 16, 2026

Post Facebook

46/100

Trust score

0 = danger · 100 = safe

SUSPICIOUS

Score breakdown

Heuristics 52·MT 40

Category tags

utilitydownloaderHow sure we are: Moderate

Technical red flags (1)

2 of 92 engines flagged

Positive signals (4)

No Google Safe Browsing matchDomain is 6 years oldEncrypted connectionNo significant IP abuse signal

These checks passed — but they don't clear the site. Valid SSL and a calm hosting IP only show that parts of the infrastructure work normally. They do not prove the business is real or cancel the warning signals above.

View density

If this is a scam — what it means for you

You were probably about to click 'Allow', 'Download', or a 'fix'/'claim' button.

If it is, nothing is actually wrong with your device and you didn't win anything — those buttons install adware, spam notifications, or lead to a fake-support scam.

If this is a scam, how it works

The typical trap, step by step

This site is unverified — it may be legitimate. If it is a scam, this is the playbook pages like it follow:

A pop-up screams “Congratulations, you won!” or “Your device is infected!”.
A fake countdown or alarm manufactures panic and urgency.
Clicking “Allow”, “Download”, “Scan now”, or “Call support” is the trap.
You get adware, spam notifications, and junk extensions — or a fake phone-support scam.

If a site follows these steps, treat it as unsafe — close it and don't enter anything.

At a glance

The most useful evidence from this scan, separated from the final verdict so you can judge the signals yourself.

11 checks completed

Antivirus engines

2/92

Engines flagged this URL

Domain Age

6 years old

Registered Aug 17, 2020

Browser blocklists

Clear

No Google Safe Browsing warning

Encryption

Valid

TLS TLSv1.3

Visual inspection

65/100

Visual risk score

Open-web research

Partial

Only validated claims are shown

Website Preview

SCAN-TIME CAPTURE

y2mate.is

What our review noticed on this page

1Visual risk score 65/100 2Promotes a 'pi' URL manipulation trick to redirect users to third-party domains 3Uses generic 'free' downloader branding common in low-reputation utility sites

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

Intelligence

Advanced threat intelligence

Analysis

Moderate scam likelihoodengineMT · Guardiantrust40/100

MT AgentLive web researchVisual inspection

75%

Confidence

Risk Factors

One antivirus engine flags the page as malicious and another marks it as spam.
Three user complaints on independent review sites describe intrusive pop-up ads that block normal use.
Security analysis links the site to browser notification spam and deceptive permission prompts.
Page loads external domains previously flagged as malicious in automated sandbox reports.
No contact email, phone, or address listed anywhere on the site.
Visual analysis notes a common 'pi' URL trick that routes users through third-party domains.

Positive Signals

Domain registered in 2020 and has been active for nearly six years.
TLS certificate is valid and issued by a trusted provider.
Hosting IP shows zero abuse reports and a clean reputation score.

The full analysis

Site purpose and visitor journey

Y2mate.is functions as an online YouTube downloader. A visitor pastes a video URL into the search box, the tool fetches available formats, and the user selects MP3 audio or MP4 video quality before clicking Convert and then Download. The interface includes a language selector and a prominent tip suggesting users insert “pi” into YouTube URLs to speed up downloads.

Security and transparency signals

No email address, phone number, or postal address is listed on the page. The site loads several external domains, among them keyhamates.com and nowpayments.io, that sandbox analysis has previously associated with malicious activity. Automated reports also note connections to uidsync.net, another domain flagged in the same analysis.

Observed issues

Three user complaints on independent review sites describe intrusive pop-up ads that appear every few seconds and interfere with basic site functions. Security vendors classify the domain as a source of browser notification spam, with prompts that ask users to “Click Allow to continue.” Visual analysis confirms the generic free-downloader branding and the “pi” URL manipulation tactic that routes traffic through third-party domains.

Domain and infrastructure facts

The domain was registered in August 2020 and remains active. Its TLS certificate is valid and issued by Google Trust Services, and the hosting IP carries a zero abuse score. These facts establish basic infrastructure legitimacy but do not mitigate the ad-related complaints or external-domain connections.

AI Recommendation

Do not grant notification permissions or download files from the site. Use YouTube’s official app or a reputable browser extension instead.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Domain Timeline

Threat Detection

Antivirus Engines

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Scam-Type Likelihood

1 scam-type patterns detected

Scam-Type Likelihood

1 of 21 categories showed signals

We check every URL against 21 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Scareware & Fake Pop-ups

Scareware & Fake Pop-ups

High likelihood

80/100

Tagged as scareware / adware / malvertising.
Scareware / adware / notification-spam language in the tags.

Scam-Type Likelihood

1 of 21 categories showed signals

Top match: Scareware & Fake Pop-ups

Scareware & Fake Pop-ups

High likelihood

80/100

Tagged as scareware / adware / malvertising.
Scareware / adware / notification-spam language in the tags.

Technical Details

domain · encryption · redirects · server reputation · referenced

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Domain History

Age6 years old

RegistrarHidden

RegisteredAug 17, 2020

ExpiresUnknown

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresSep 10, 2026 (55d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

PopularityNot in popularity top list

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301https://y2mate.is/
2200https://en1.y2mate.is/oK4/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

challenges.cloudflare.com zl.keyhamates.com nowpayments.io platform-api.sharethis.com googletagmanager.com push-sdk.com ajax.googleapis.com maxcdn.bootstrapcdn.com

What to do

Fake pop-up / scareware page

This page uses fake "you won a prize" or "your device is infected" pop-ups to push adware, browser-notification spam, unwanted extensions, or a fake support number — none of it is real.

Treat y2mate.is as unverified
Do not enter credentials or send money until you have independently verified the business.
Close the tab — don't click "Allow", "Download", or "Call"
You didn't win, and your device isn't infected. Every "Allow notifications", "Download", "Scan now", or "Call support" button leads to adware, junk extensions, or a scam. Just close the tab — or the whole browser.
If you clicked "Allow", turn the notifications back off
Open your browser's Site Settings → Notifications, find the site, and set it to Block (or remove it). That stops the spam pop-ups it now pushes to your desktop.
Remove anything it installed, then run an adware scan
Uninstall any browser extension, "player", "codec", or app you added because of this page, and run a reputable free adware / malware cleaner (e.g. Malwarebytes) to clear leftover PUPs. And never call a number shown in a pop-up — real vendors don't do that.
Open

Safer Alternatives

Trying to download software? Use a safe option instead

Downloading software? Get it from the maker's official site or an official app store — "cracked", "modded", or keygen downloads are one of the most reliable ways to install malware.

The vendor's official website

Search the product name + "official" and check the domain before downloading.

Microsoft Store

Vetted Windows apps.

Ninite

Bundles legitimate free apps from their real sources.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final Verdict

Trust / 100

Final Verdict·y2mate.is

SUSPICIOUS

Why we rated y2mate.is suspicious

The site offers free YouTube-to-MP3/MP4 conversion with no registration required. Three independent user complaints describe persistent ads that block normal use, and automated analysis links it to domains previously flagged as malicious.

Do not grant notification permissions or download files from the site. Use YouTube’s official app or a reputable browser extension instead.

AV engines

Domain age

6 yrs

Flagged

Scan another URL

Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

y2mate.is is a scareware / fake-pop-up page — the kind that flashes "Congratulations, you won!" or "Your device is infected!" alerts to push adware, browser-notification spam, unwanted extensions, or a fake support number. 2 of 92 security engines flag it (1 as outright malicious). None of it is real — you didn't win, your device isn't infected, and its "Allow", "Download", and "Call" buttons all lead to junkware or a scam. Close the tab: don't click anything, don't allow notifications, and never call a number it shows.
Proceed with caution — y2mate.is scores 46/100 on our trust scale. We found enough warning signals to recommend verifying it through independent channels before entering credentials or money.
Almost certainly not from just loading it. y2mate.is shows fake "you won a prize" or "your device is infected" pop-ups to scare or tempt you into clicking — the pop-up itself is the trick, not a real infection or a real prize. The danger is what happens if you act on it: clicking "Allow" turns on spam desktop notifications, and "Download", "Update", or "Scan now" buttons install adware, unwanted extensions, or PUPs. If you only saw the pop-ups and closed the tab, you're fine. If you clicked "Allow", block the site under your browser's Notifications settings; if you installed or downloaded anything, remove it and run a reputable free adware/malware cleaner (e.g. Malwarebytes). And never call a "support" number shown in a pop-up — that's a scam.
No. The "Congratulations, you won!" and "Your device is infected!" pop-ups on y2mate.is are fake — an automated ad-network page shows the same message to everyone who lands on it. You didn't win anything, and nothing actually scanned your device. The whole point is to get you to click: "Claim", "Allow", "Download", and "Call" all lead to adware, spam notifications, junk browser extensions, or a fake-support phone scam. Close the tab and don't click anything on the page.
If you're getting pop-ups even after closing the page, you probably clicked "Allow" on a notification prompt — the spam now comes from your browser, not the site. Open your browser settings → Site Settings → Notifications, find y2mate.is (and anything else you don't recognise), and set it to Block or remove it. Then uninstall any extension, "player", or app you added because of the page, and run a reputable free adware/malware cleaner (e.g. Malwarebytes) to clear leftover PUPs.
Yes. 2 of 92 antivirus and blocklist engines in our malware network flagged y2mate.is, 1 of them as outright malicious. Even a single detection from a reputable engine is a meaningful warning, and multiple detections rarely happen by accident.
No — y2mate.is is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
y2mate.is is 5.9 years old, registered on August 17, 2020. A multi-year registration history is one of the stronger signals against a scam, though it's never a guarantee on its own — established domains can still be misused.
Yes — y2mate.is presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, valid for another 55 days. Important caveat: SSL only encrypts the connection between you and the site — it does not verify who runs it. Almost all scam sites now have valid SSL too, so a padlock alone never means "safe".
y2mate.is resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
This report is a record of the scan run on July 16, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about y2mate.is has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

Recently scanned

Other Suspicious reports

Browse all reports

Suspicioustrust46

m4ckd0ge-repacks.site

Jul 16, 2026

v16-video-sea.gonewsvod.com

Jul 16, 2026

Read the review

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.