greenshot[.]org
“Greenshot.org - Download Greenshot for PC and Mac”
Evidence Summary
This domain, greenshot.org, poses a significant threat as it is flagged for credential theft. Users may be lured into providing sensitive personal information under the guise of downloading software, which can lead to identity theft or unauthorized access to accounts.
The analysis indicates that greenshot.org was created on November 22, 2007, and is currently registered through Internet Domain Service BS Corp. The domain is still active and resolves to the IP address 35.214.148.249. A review on VirusTotal revealed that 2 out of 95 security vendors have flagged this domain, indicating a recognized risk in the cybersecurity community.
If an individual has visited greenshot.org, it is advisable to run a comprehensive security scan on their devices, change passwords for any accounts that may have been accessed, and enable two-factor authentication where available. Additionally, users should monitor their accounts for any unusual activity and report any suspicious communications received after visiting this domain.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 12, 2026
8 monitored external feeds No match
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
9 high-confidence technologies identified
VirusTotal Analysis
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive