Is shiroko.co a scam?

Our automated security review marked shiroko.co as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.

Is shiroko.co safe to use?

shiroko.co currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.

Does shiroko.co have a valid SSL certificate?

Yes. shiroko.co presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 39 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has shiroko.co been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report shiroko.co as clean.

Is shiroko.co on any phishing or malware blacklists?

No. shiroko.co is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is shiroko.co hosted?

shiroko.co resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the shiroko.co report updated?

This is a permanent record of the scan run on June 12, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around shiroko.co have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is shiroko.co legit or a scam?

Our verdict:Suspicious· 55/100

SafeSuspiciousDangerous

Free anime streaming aggregator with clean security scans but no business registration and reliance on third-party content APIs raises legal and stability concerns.

Top reasons

Operates as an unofficial content aggregator scraping from third-party APIs (Anilist, Consumet, Aniwatch) rather than hosting licensed content, creating legal exposure.No legitimate business registration found in any jurisdiction; WHOIS privately registered with no transparent operator identity.No contact email, phone, or postal address listed on the site, limiting user recourse if issues arise.

shiroko.coScanned 2d ago

Post Facebook

Trust score

SUSPICIOUS

Heuristics 87·MT 62

Category tags

streamingpiracy72% MT confidence

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Suspicious

Moderate likelihood · 72% confidence

SUSPICIOUS

Warning signs detected

Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

LIVE RENDER

shiroko.co

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Moderate scam likelihoodengineMT · Guardiantrust62/100

MT AgentLive web researchVisual inspection

Confidence

Shiroko presents itself as a free, ad-free anime and manga streaming platform. Our antivirus network and browser blocklists show no malicious or phishing detections, and independent trust sites assign it positive ratings (an independent review aggregator: 100/100, Gridinsoft: 66/100). The domain is approximately 2 years old and hosted on a clean IP with valid SSL. However, the site operates as an unofficial aggregator scraping from third-party APIs (Anilist, Consumet, Aniwatch) rather than hosting licensed content. WHOIS data is privately registered via Porkbun, and no legitimate business registration exists in any jurisdiction. The site accepts donations via Ko-fi and has an active GitHub repository, suggesting genuine development effort, but the lack of any legal entity or business structure, combined with reliance on unlicensed content sources, places it in a legally grey zone. No scam reports or user complaints appear in our research, which is a positive signal for operational legitimacy, but the absence of business transparency and the piracy model create moderate risk for users.

Full dossier

Analysis complete

Page Content

The site displays a clean, minimal interface titled 'Shiroko - Free Anime and Manga Streaming'. No login form, countdown timer, or push-notification spam is present. The page loads via JavaScript (Next.js framework) and includes only Cloudflare analytics tracking. No contact email, phone, postal address, or social media links are visible on the page.

Infrastructure

Hosted on IP 104.21.75.86 (Cloudflare) with a valid SSL certificate issued by Google Trust Services, expiring in 39 days. The IP has zero abuse reports and a clean reputation score. One redirect detected, non-malicious. No malware, phishing, or suspicious code detected by our antivirus network (0/92 engines flagged).

Domain History

Registered approximately April 2024 (age ~2 years as of 2026). WHOIS data is privately registered via Porkbun registrar (Private by Design, LLC). The domain is not indexed in global traffic rankings. The site is built on open-source code (GitHub: Shiroko-Dev) and appears to be a successor or fork of the Moopa project, integrating with Anilist, Consumet, and Aniwatch APIs for content aggregation.

Web Reputation

Independent trust aggregators rate the site positively: an independent review aggregator assigns a Trust Score of 100 and states it is 'very likely not a scam but legit and reliable'; Gridinsoft rates it 66/100 with low malware and phishing risk. No scam reports, complaints, or user theft incidents appear in our research. Reddit communities (r/animepiracy, r/Natsume) reference the site for streaming. A Ko-fi donation page exists to support development, indicating active maintenance.

Risk Factors

Operates as an unofficial content aggregator scraping from third-party APIs (Anilist, Consumet, Aniwatch) rather than hosting licensed content, creating legal exposure.
No legitimate business registration found in any jurisdiction; WHOIS privately registered with no transparent operator identity.
No contact email, phone, or postal address listed on the site, limiting user recourse if issues arise.
Reliance on third-party APIs and external content sources creates stability risk if upstream services change or shut down.
Not indexed in global traffic rankings, suggesting low mainstream visibility and potential instability.

Positive Signals

Zero malware, phishing, or suspicious detections across our antivirus network and browser blocklists.
Clean hosting IP with zero abuse reports and valid SSL certificate.
Positive trust ratings from independent security aggregators (an independent review aggregator 100/100, Gridinsoft 66/100).
Active open-source GitHub repository (Shiroko-Dev) with transparent development and community engagement.
No scam reports, user complaints, or theft incidents found in our research.

AI Recommendation

Do not enter payment information or personal credentials on this site. While the site shows no malware or phishing signals and has positive trust ratings, it operates as an unofficial content aggregator without business registration or legal transparency. Use at your own risk, understanding that the site may be unstable or subject to legal action, and that content is sourced from unlicensed third-

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for shiroko.co, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

4 positive

Key findings

7 headline facts from open-web research

Domain registered approximately April 2024 (age ~2 years as of 2026 per multiple scanners); WHOIS data protected via Porkbun registrar with private ownership.
Site presents as a free, ad-free anime and manga streaming platform; GitHub repo (Shiroko-Dev) describes it as built with Next.js, TypeScript, Firebase, Anilist, Consumet and Aniwatch APIs.
Previously known as or affiliated with Moopa (github.com/Ani-Moopa), a similar open-source anime streaming project that integrates with Anilist for tracking.
Scamadviser assigns Trust Score 100 and states it is "very likely not a scam but legit and reliable"; Gridinsoft gives 66/100 with low malware/phishing risk but notes low Tranco rank.
Reddit users in r/animepiracy and r/Natsume have referenced the site for streaming (including during periods of maintenance or downtime); Ko-fi page exists for donations to support development.
No scam reports, malware complaints, phishing incidents, or user reports of theft found across searches for "scam", "malware", "complaint".
Competes in anime streaming category alongside sites like hianime.tv; functions as a piracy/unofficial streaming aggregator scraping from other sources.

Positive reviews (4)

Quotes indicating the site is legitimate.

Scamadviseropen
"shiroko.co is very likely not a scam but legit and reliable. Trust Score 100."
Gridinsoftopen
"Shiroko.co appears to be generally safe overall... The site does not currently look like a confirmed scam."
Ko-fi / Shirokocoopen
"Thank you so much for supporting Shiroko development!! Don't worry, we won't let it die ^-^"
Emailveritasopen
"No unsafe content found: the website has passed our security checks without detection of known threats."

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research found no scam reports, complaints, or malware incidents associated with shiroko.co. Independent trust aggregators assign positive ratings: an independent review aggregator (Trust Score 100), Gridinsoft (66/100), and Emailveritas (no unsafe content detected). The site is referenced in Reddit communities (r/animepiracy, r/Natsume) as a functional streaming platform. A Ko-fi donation page exists for supporting development, and the GitHub repository (Shiroko-Dev) shows active maintenance. The site appears to be a legitimate open-source project, though it operates in the unofficial/piracy streaming category and lacks formal business registration or transparent operator identity.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious60Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresJul 22, 2026 (39d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://shiroko.co/
2200https://shiroko.co/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

Treat shiroko.co as unverified
Do not enter credentials or send money until you have independently verified the business.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

static.cloudflareinsights.com

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review marked shiroko.co as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
shiroko.co currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
Yes. shiroko.co presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 39 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
No. All 92 antivirus engines in our malware network report shiroko.co as clean.
No. shiroko.co is not currently listed on the major browser blocklist feeds that modern browsers use.
shiroko.co resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 12, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around shiroko.co have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·shiroko.co

SUSPICIOUS

Shiroko is a free anime and manga streaming site built on open-source code that aggregates content from third-party APIs. While it shows no malware or phishing signals and has positive trust ratings, it operates as an unofficial piracy aggregator with no legitimate business registration, making it legally risky and potentially unstable.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Suspicious reports

crimson-voice-4fff.drake4212.workers.dev

blastleadgeneration.com

omnitherapyrooms.co.uk

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.