Is skr.sh safe?
https://skr.sh/sdunJDKRfQD
Checked on
How we checked
Coverage: complete · 4 of 4 applicable core capabilities
- Antivirus (60 of 93 engines answered): completed
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Skrinshoter is a legitimate-looking screen-capture service, but its software has security detections
The site presents screenshot and screen-recording functions and sells a PRO subscription. However, the associated software sample received malicious or suspicious verdicts in two security analyses, making downloads a moderate risk despite the domain's long history and currently clean website checks.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 58/100
Moderate Risk covers scores 45–69. 3 findings pulled the score down; 2 pushed it up.
What pulled the score down
- Moderate1 independent antivirus family reported an adverse result. CRDF Gridinsoft URLQuery
- ModerateOne public warning on a scam-warning or security site: "4/67 Antivirus vendors marked sample as malicious (5% detection rate)"
- MinorThe page redirected the browser to an unrelated external domain.
What pushed the score up
- SupportsThe registrable domain is 2,438 days old.
- SupportsThe saved checks found no current web threat warning and a valid encrypted connection.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
The site presents screenshot and screen-recording functions and sells a PRO subscription. However, the associated software sample received malicious or suspicious verdicts in two security analyses, making downloads a moderate risk despite the domain's long history and currently clean website checks.
The software sample drew adverse security verdicts
A current aggregate scan recorded one malicious and two suspicious detections among 93 engines. A separate historical analysis recorded four malicious verdicts among 67 engines. These are minority findings rather than universal agreement, but they are sufficient to warrant caution with the installer.
An additional aggregate result says one independent antivirus family reported an adverse result, reinforcing that the concern is not based solely on the site's presentation.
Established domain and clean web checks reduce—but do not remove—the concern
The registrable domain is 2,438 days old, the saved connection check found valid encryption, and the current web-reputation check returned no threat warning. Those facts support the website connection itself, but they do not establish that downloaded software is safe.
The service promotes a PRO tier and offers an on-site option to buy a new subscription. It also links to an on-site subscription-cancellation and payment-refund page; the supplied evidence does not establish hidden renewal terms or refund obstruction.
The site's full contact details were not reviewed, so this assessment does not verify the operator's contact information.
Why the score is 58
1 independent antivirus family reported an adverse result. CRDF Gridinsoft URLQuery. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
3/ 93
detectionsFresh result
3 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 2
- Total
- 93
| Engine | Finding |
|---|---|
| CRDFMalicious | malicious |
| GridinsoftSuspicious | suspicious |
| URLQuerySuspicious | suspicious |
All 93 engine results
- CRDF - Malicious
- Gridinsoft - Suspicious
- URLQuery - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- alphaMountain.aiInformation Technology, Software Downloads
- Forcepoint ThreatSeekerinformation technology
- Sophosdownload freeware and shareware
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Скриншотер
What the captured page showed
1 observation- 01
Скриншотер
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
Pages we read
- Main page/sdunJDKRfQDRead
- Terms/tosRead
03 · Investigation Story
Investigation story
What the site claims
The captured page appears to offer a saas service.
What we observed
The page content was captured and checked alongside 60 antivirus results.
What independent research found
1 external finding was saved and compared with the page evidence.
What remains unverified
The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.
What kind of site and risk is this?
Threat category
Malware & Deceptive Downloads
Service and business model
Saas
Observed behavior
Evidence behind this classification
- 01The associated software sample received one malicious and two suspicious detections across 93 engines.
- 02One public warning on a scam-warning or security site: "4/67 Antivirus vendors marked sample as malicious (5% detection rate)"
- 031 independent antivirus family reported an adverse result. CRDF Gridinsoft URLQuery
Web research findings
Independent findings for skr.sh, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- Hybrid Analysisopen
"4/67 Antivirus vendors marked sample as malicious (5% detection rate)"
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainskr.sh
- Redirects toskrinshoter.ru
- Hosted byEdgeCenter LLC
- Referenceschrome.google.com · fonts.googleapis.com
Domain Timeline
- Feb 6, 2020Domain registered
First appeared in WHOIS records — 6 years old when this review was saved.
- Oct 10, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
This is the certificate of skrinshoter.ru, the site this URL lands on. Certificate issued for skr.sh.
This is the address of skrinshoter.ru, the site this URL lands on.
Analytics and ads
- Yandex Metrica
Scripts, fonts and CDNs
- Google Fonts
- cdnjs
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301https://skr.sh/sdunJDKRfQD
- 2200https://skrinshoter.ru/sdunJDKRfQDcross-domain
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
1 independent antivirus family reported an adverse result. CRDF Gridinsoft URLQuery
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning on a scam-warning or security site: "4/67 Antivirus vendors marked sample as malicious (5% detection rate)" · The page redirected the browser to an unrelated external domain.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 3 of 93 engines flagged | Completed | Adverse | fresh · analysed Oct 10, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 10, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 10, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 10, 2026 |
| Independent research | 1 independent finding was saved | Completed | Adverse | this scan · Oct 10, 2026 |
- Antivirus
- Result3 of 93 engines flagged
- CompletionCompletedFindingAdverse
- Freshnessfresh · analysed Oct 10, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 10, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 10, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 10, 2026
- Independent research
- Result1 independent finding was saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Oct 10, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is skr.sh a scam or is it safe?
Is skr.sh safe to use?
Has skr.sh been flagged by antivirus engines?
Is skr.sh on any phishing or malware blacklists?
How old is the skr.sh domain?
Does skr.sh have a valid SSL certificate?
Where is skr.sh hosted?
How often is the skr.sh report updated?
08 · Final Verdict
Final verdict
Skrinshoter is a legitimate-looking screen-capture service, but its software has security detections
The site presents screenshot and screen-recording functions and sells a PRO subscription. However, the associated software sample received malicious or suspicious verdicts in two security analyses, making downloads a moderate risk despite the domain's long history and currently clean website checks.
09 · Community
Community
Are you the owner of skr.sh?Verify and reply