AI-Built Torrent Site Looks Inside Downloads to Catch Fakes and Malware

TorrentClaw is a torrent search engine largely built and run with AI components (Claude Code plus local LLMs) that crawls its own DHT and dozens of external indexes to assemble more than six million torrents. Its standout feature, TrueSpec, joins swarms and downloads the first 10-20 MB of files to read container headers with ffprobe, lookup file hashes on VirusTotal, and - when VirusTotal flags a threat - label torrents as “Malware detected” and disable downloads while keeping listings visible. TrueSpec also flags deceptive releases (mislabeled resolutions, hidden subtitles, programs disguised as videos) and is used alongside an MCP API that lets AI assistants fetch .torrent files directly.

Testing and transparency reveal scale and limits: TrueSpec probed 687,057 torrents and flagged 1,265 as deceptive (under 0.2%), while relying on VirusTotal confirmation to list 34 malware cases. Thirty-one of those follow a recurring vector: a renamed genuine VLC executable plus a malicious libvlc.dll that VLC loads, delivering a trojan. TrueSpec prioritizes well-seeded film/TV swarms, skips large executables and dead swarms, and runs cheaply (three nodes under $50). TorrentClaw uses AI to process DMCA takedowns, claims a read-only, transient analysis workflow, and offers paid PRO tiers, leaving unresolved legal exposure from partial downloads and distribution of pirated content.