Fake pop-ups & scareware — don't click or call
Typosquatted screamer site mimicking prntscr.com (Lightshot) to deliver jumpscare pranks.
Is pnrtscr.com legit or a scam?
Typosquatted screamer site mimicking prntscr.com (Lightshot) to deliver jumpscare pranks.
This is a known screamer/jumpscare site that uses typosquatting to impersonate the legitimate Lightshot screenshot service. The domain is 9.5 years old and has been publicly documented as a prank site that triggers fullscreen flashing images and loud audio. Avoid visiting it.
Score breakdown
See the live page ↓These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.
What this means for you
You were probably about to log in or pay, thinking this was the real company.
It's a look-alike copy, not the genuine site. Your login or payment goes to scammers — the real company never sees it.
How this scam works
The trap, step by step
They register a look-alike domain and copy a trusted brand's website.
You arrive via a link or ad, believing it's the genuine company.
You log in or pay — to the impostor, not the brand.
Your credentials or money go to the scammers; the real company never sees it.
Recognising the pattern is the best defence — if a site follows these steps, close it and don't enter anything.
Analysis Summary
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. Marker positions are approximate. See full visual analysis →
Visual analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual red flags detected in the screenshot
We could not capture a fully-rendered screenshot of this page; visual analysis is inconclusive.
What our vision model saw
1 signalScreenshot incomplete — site may be slow to render
Intelligence
The domain pnrtscr.com is a deliberate typosquat of the real screenshot service prntscr.com. Evidence from multiple sources confirms the site triggers fullscreen flashing images and loud audio when users visit specific paths. The creator has publicly admitted the site is a modern jumpscare test. One antivirus engine flags it as malicious and another as suspicious. The domain is 9.5 years old, but its documented purpose as a deceptive prank site outweighs the age signal.
Web Research Findings
Independent findings for pnrtscr.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- The domain is a well-documented 'screamer' or 'jumpscare' website intended to prank users.
- It uses a typosquatting strategy, swapping the 'rn' in 'prntscr.com' to 'nr' to mimic the legitimate Lightshot screenshot service.
- When users visit specific sub-paths, the site triggers a full-screen, high-volume flashing image (typically 'Jeff the Killer') and a loud noise.
- The site creator has publicly acknowledged the site's purpose as a 'modern jump scare' and a test of browser security features.
- While the site is primarily a prank, security vendors have occasionally blacklisted it due to its deceptive nature and use of browser-trapping techniques like the Fullscreen API.
- The domain itself, when accessed without a sub-path, has been known to redirect to the legitimate prntscr.com website.
- Screamer Wikiopen
"Pnrtscr.com was a screamer website created in 2021 that utilizes typosquatting to deceive users into believing they were accessing "prntscr.com", a well-known screenshot hosting website."
- Redditopen
"I run pnrtscr.com, which I dubbed screamshot a couple years ago... I thought I would attempt to create a modern jump scare (otherwise known as a screamer)."
- Gridinsoftopen
"Security vendors blacklist Pnrtscr.com; trust score is 35/100. User reviews are available. Avoid passwords, personal, or payment data."
The domain is a deliberate typosquat of the legitimate screenshot hosting service 'prntscr.com' (Lightshot), designed to trick users into visiting a screamer/jumpscare page.
Screamer Wiki documents pnrtscr.com as a screamer website created in 2021 that uses typosquatting to deceive users into believing they were accessing prntscr.com. A Reddit post from the site operator confirms the jumpscare purpose and describes it as an educational test of browser security features. Gridinsoft reports the domain has a trust score of 35/100 and notes that security vendors blacklist it due to its deceptive nature.
Domain Timeline
- Jan 29, 2017Domain registered
First appeared in WHOIS records — 9.5 years old today.
- Jul 25, 2026Latest security review — Flagged as dangerous
This scan re-ran every check; the current findings are detailed above.
pnrtscr.com is an established domain now carrying threat signals. An older domain that starts tripping security checks is a classic pattern for an asset that was sold, repurposed, or compromised — the age alone is not reassurance.
Threat Detection
Scam Network
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Scam-Type Likelihood
2 scam-type patterns detected
2 of 21 categories showed signals
Each card names a specific harm pattern and the concrete facts that support it. The category score is supporting context; the report verdict above remains the final severity decision.
- Tagged as scareware, abusive ads, or deceptive notification behavior.
- Domain is a typosquat of prntscr.com.
- The evidence pattern matches brand / clone-site impersonation.
2 of 21 categories showed signals
Each card names a specific harm pattern and the concrete facts that support it. The category score is supporting context; the report verdict above remains the final severity decision.
- Tagged as scareware, abusive ads, or deceptive notification behavior.
- Domain is a typosquat of prntscr.com.
- The evidence pattern matches brand / clone-site impersonation.
Technical Details
domain · encryption · redirects · server reputation · referencedThe plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Domain & Encryption
Server Reputation
What to do
Fake pop-ups & scareware
This page uses fake "you won a prize" or "your device is infected" pop-ups to push adware, browser-notification spam, unwanted extensions, or a fake support number — none of it is real.
- Do not interact with pnrtscr.com
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
- Close the tab — don't click "Allow", "Download", or "Call"
You didn't win, and your device isn't infected. Every "Allow notifications", "Download", "Scan now", or "Call support" button leads to adware, junk extensions, or a scam. Just close the tab — or the whole browser.
- If you clicked "Allow", turn the notifications back off
Open your browser's Site Settings → Notifications, find the site, and set it to Block (or remove it). That stops the spam pop-ups it now pushes to your desktop.
- OpenRemove anything it installed, then run an adware scan
Uninstall any browser extension, "player", "codec", or app you added because of this page, and run a reputable free adware / malware cleaner (e.g. Malwarebytes) to clear leftover PUPs. And never call a number shown in a pop-up — real vendors don't do that.
Final Verdict
This is a known screamer/jumpscare site that uses typosquatting to impersonate the legitimate Lightshot screenshot service. The domain is 9.5 years old and has been publicly documented as a prank site that triggers fullscreen flashing images and loud audio. Avoid visiting it.
Safety FAQ
Common questions, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- pnrtscr.com is a scareware / fake-pop-up page — the kind that flashes "Congratulations, you won!" or "Your device is infected!" alerts to push adware, browser-notification spam, unwanted extensions, or a fake support number. 2 of 92 security engines flag it (1 as outright malicious). None of it is real — you didn't win, your device isn't infected, and its "Allow", "Download", and "Call" buttons all lead to junkware or a scam. Close the tab: don't click anything, don't allow notifications, and never call a number it shows.
- No — pnrtscr.com scored just 3/100 on our trust scale, and we detected active threat indicators. We recommend avoiding it entirely: don't log in, pay, download anything, or connect a wallet.
- Almost certainly not from just loading it. pnrtscr.com shows fake "you won a prize" or "your device is infected" pop-ups to scare or tempt you into clicking — the pop-up itself is the trick, not a real infection or a real prize. The danger is what happens if you act on it: clicking "Allow" turns on spam desktop notifications, and "Download", "Update", or "Scan now" buttons install adware, unwanted extensions, or PUPs. If you only saw the pop-ups and closed the tab, you're fine. If you clicked "Allow", block the site under your browser's Notifications settings; if you installed or downloaded anything, remove it and run a reputable free adware/malware cleaner (e.g. Malwarebytes). And never call a "support" number shown in a pop-up — that's a scam.
- No. The "Congratulations, you won!" and "Your device is infected!" pop-ups on pnrtscr.com are fake — an automated ad-network page shows the same message to everyone who lands on it. You didn't win anything, and nothing actually scanned your device. The whole point is to get you to click: "Claim", "Allow", "Download", and "Call" all lead to adware, spam notifications, junk browser extensions, or a fake-support phone scam. Close the tab and don't click anything on the page.
- If you're getting pop-ups even after closing the page, you probably clicked "Allow" on a notification prompt — the spam now comes from your browser, not the site. Open your browser settings → Site Settings → Notifications, find pnrtscr.com (and anything else you don't recognise), and set it to Block or remove it. Then uninstall any extension, "player", or app you added because of the page, and run a reputable free adware/malware cleaner (e.g. Malwarebytes) to clear leftover PUPs.
- Yes. 2 of 92 antivirus and blocklist engines in our malware network flagged pnrtscr.com, 1 of them as outright malicious. Even a single detection from a reputable engine is a meaningful warning, and multiple detections rarely happen by accident.
- No — pnrtscr.com is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
- pnrtscr.com is 9.5 years old, registered on January 29, 2017 through Cloudflare, Inc.. A multi-year registration history is one of the stronger signals against a scam, though it's never a guarantee on its own — established domains can still be misused.
- pnrtscr.com resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
- This report is a record of the scan run on July 25, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about pnrtscr.com has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.