Security Review

Is yts.lu legit or a scam?

Our verdict:Dangerous· 25/100

Pirated-movie clone site with confirmed malware distribution and low trust rating from independent security reviewers.

yts.luScanned 1h ago
0
Trust score
DANGEROUS
Heuristics 76·MT 18
Category tags
piracymalware distributionclone site#Clone Site#Malware92% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
Registration date unknown
MT Intelligence
Dangerous
Critical likelihood · 92% confidence
DANGEROUS

Brand impersonation — not the real site

Pirated-movie clone site with confirmed malware distribution and low trust rating from independent security reviewers. This page is styled as a brand but is not the brand's real site. Go to the official site directly, and treat any download, login, or payment request here as unsafe.

Website Preview

Screenshot of yts.lu
LIVE RENDER
yts.lu

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust18/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
yts.lu presents itself as 'The Official Home of YIFY Movies Download' while operating under a .lu domain — a classic clone-site pattern. Our network fingerprint confirms it mirrors yts.mx, a known piracy operation. Independent security reviewers gave the site a trust score of 31/100 and flagged it for distributing illegal content with potential malware risks. A Reddit user reported downloading a .exe file instead of an .mp4 from the site, a hallmark of malware-laden torrent proxies. The site lacks any legitimate business registration, contact email, or postal address. While our antivirus engines have not yet flagged the domain itself, the combination of confirmed piracy distribution, malware-in-download reports, and clone-site infrastructure makes this a high-risk destination.
Full dossier
Analysis complete

Page Content

The site displays a movie-browsing interface with titles, ratings, and download links. The page title claims 'The Official Home of YIFY Movies Download - YTS.MX' while using the yts.lu domain — a mismatch that signals a clone or proxy. No legitimate business contact information, email, or postal address is present.

Infrastructure

Hosted on IP 104.21.54.94 with clean abuse reports and valid SSL from Google Trust Services. The domain uses a .lu (Luxembourg) TLD with unavailable WHOIS data, typical for piracy operations seeking anonymity. No login form or countdown timers detected, but external trackers (histats, Cloudflare Insights) are loaded.

Domain History

Our network analysis confirms yts.lu is a clone of yts.mx. The YTS/YIFY group originally shut down in 2015; all current YTS sites are unofficial successors. Historical YTS domains include yts.mx, yts.lt, and yts.bz. The .lu variant appears as one of multiple mirrors discussed in torrent communities.

Web Reputation

Independent security reviewers assigned a trust score of 31/100 and flagged the site for illegal pirated-movie distribution. Reddit users reported both successful downloads and a suspicious .exe file received instead of video — a known malware-distribution tactic. No legitimate business registration found in Luxembourg or elsewhere.

Risk Factors
7
  • Confirmed clone of yts.mx, a known piracy operation with no legitimate business registration.
  • Independent security reviewer flagged the site for distributing illegal content with potential malware risks (trust score 31/100).
  • Reddit user reported receiving a .exe file instead of .mp4 during download — a malware-distribution indicator.
  • Page title claims to be 'official' YTS while using a different domain, a classic phishing/clone-site deception pattern.
  • No contact email, postal address, or business details visible; WHOIS data unavailable.
  • Original YIFY group shut down in 2015; all current YTS sites operate in legal gray area with known ad-injection and malware risks.
  • External trackers and analytics loaded; typical of piracy sites monetizing through ads and data collection.
Positive Signals
3
  • SSL certificate is valid and issued by a trusted CA (Google Trust Services).
  • Hosting IP has zero abuse reports and a clean reputation score.
  • Some Reddit users report successful streaming or downloads from the site without incident.
AI Recommendation
Do not visit or download from yts.lu. The site distributes pirated content, has been flagged for malware distribution, and one user reported receiving executable files instead of videos. Use legitimate streaming services instead.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for yts.lu, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Clones yts.mx
The page impersonates a well-known brand's site.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 2 positive
Key findings
7 headline facts from open-web research
  • yts.lu presents itself as the official YTS/YIFY torrent site with title 'YTS: The Official Home of YIFY Movies Download - YTS.MX' and offers pirated movie torrents in 720p/1080p/4K.
  • Scamadviser gives en.yts.lu a trust score of 31/0 (low), flags it for illegal/pirated content, low Tranco rank, and notes it may be a scam with potential malware risks.
  • Reddit users report using yts.lu/en.yts.lu for streaming or downloads; one user encountered a suspicious .exe file instead of .mp4 during download from en.yts.lu.
  • No specific business registration or owner details found; .lu WHOIS does not publicly reveal owner data.
  • YTS operators have historically used domains like yts.mx (primary until 2025 issues), yts.lt, and yts.bz; yts.lu appears as one of multiple mirrors/proxies/clones discussed in torrent communities.
  • Original YIFY group shut down in 2015; all current YTS sites are unofficial successors operating in legal gray area with known risks of malware in ads or fake downloads.
  • Domain age unknown from public sources; ScamDoc notes unknown creation date and requires more investigation (average trust score ~60%).
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • Scamadviseropen

    "en.yts.lu has a low trust score. The website may be a scam. This website was flagged as having illegal content. This website appears to be distributing illegal content... providing links to pirated movies... Most content offered by piracy w"

  • Reddit r/torrentsopen

    "I used en.yts.lu and when downloading, I noticed the extension was not an .mp4 but .exe so I quickly deleted."

Positive reviews (2)
Quotes indicating the site is legitimate.
  • Reddit r/torrentsopen

    "I've managed to successfully watch 2 movies directly from the site ( yts . lu ) instead of downloading the ..."

  • Reddit r/PiracyArchiveopen

    "Download YIFY movies: HD smallest size https:// yts.lu /"

Impersonation / typosquat
Clone of yts.mx

Page title and description claim to be 'The Official Home of YIFY Movies Download - YTS.MX' while using yts.lu domain; YTS has used yts.mx, yts.lt, yts.bz as primary domains historically

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Independent security reviewers assigned yts.lu a trust score of 31/100 and flagged it for distributing illegal pirated content with potential malware risks. Reddit users in torrent communities reported mixed experiences: some successfully streamed or downloaded movies, but one user encountered a .exe file instead of an .mp4 during download — a known malware-distribution tactic. No legitimate business registration was found in Luxembourg or public records. The site is confirmed to be a clone of yts.mx, part of a network of unofficial YTS mirrors that emerged after the original YIFY group shut down in 2015.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (1)
  • Evidence confirms this site is a clone of yts.mx.
Linked signals (1)
Clone of yts.mx

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbers2010-2019
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No postal address visible on the page.
  • Phone number listed (2010-2019).

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 17, 2026 (63d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://yts.lu/
  • 2200https://yts.lu/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation
Brand Impersonation
Moderate likelihood
30/100
  • AI analyst tagged this as a brand / clone-site impersonation.
  • Clustered with known brand-impersonation infrastructure.

Brand impersonation detected

This page is styled as a known brand but is not the brand's real site.

  • Do not interact with yts.lu

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Go to the brand's real site directly

    Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.

  • Never download or sign in here

    Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.

  • Report the impersonation to the brand

    Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags yts.lu as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — yts.lu scored 25/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. yts.lu presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 63 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • No. All 92 antivirus engines in our malware network report yts.lu as clean.
  • No. yts.lu is not currently listed on the major browser blocklist feeds that modern browsers use.
  • yts.lu resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around yts.lu have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·yts.lu
DANGEROUS

yts.lu is a clone of the notorious YTS torrent site, distributing pirated movies and flagged for malware risks. One user reported receiving a .exe file instead of a video during download. Do not use this site.

Do not visit or download from yts.lu. The site distributes pirated content, has been flagged for malware distribution, and one user reported receiving executable files instead of videos. Use legitimate streaming services instead.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.