Verdict
pagbank.com.br appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official-looking site for PagBank / PagSeguro offering card readers, payment processing, digital banking, investment products and merchant services with regulatory and contact information present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 9.2 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Not Scam.
- Domain age: 3 to 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
The website presents itself as PagBank, a Brazilian fintech platform serving businesses and consumers through merchant payment services, point-of-sale devices, digital accounts, cards, and financial products; its apparent business model combines transaction processing, device and service fees, account services, and investment-related offerings.
Scam/Impersonation Risk
No scam, phishing, impersonation, blacklist, or identity-contradiction signals were observed. Reputation checks were clean, and the domain has an established registration history consistent with a mature website. Automated interaction testing did identify suspicious inline scripting and abnormal external network activity, but it also found no cloaking, hidden forms, externally submitted password forms, wallet-drainer behavior, or clipboard manipulation; these observations are therefore treated as implementation or telemetry anomalies rather than evidence of impersonation. The available evidence supports an established, apparently legitimate site, while independently verifying the real-world operator remains appropriate.
- The homepage presented a corporate financial-services interface with no identified red-flag content, phishing indicators, or suspected brand impersonation.
- Domain registration record: created 2017-05-24; age 9.24 years; registrant listed as PAGSEGURO INTERNET S.A.
- External reputation results: 0 malicious detections, 0 suspicious detections, and no external blacklist match.
- Homepage interaction testing recorded 6 suspicious inline scripts and 19 console errors, alongside 0 hidden forms, 0 external password forms, 0 wallet-drainer runs, and 0 clipboard-hijack runs.
Regulatory Verification Notes
The site provides regulatory and contact information and presents a conventional financial-services portfolio, including Moderninha and Minizinha card readers, PagBank and business accounts, CDB and fixed-income products, investment funds, Tesouro Direto, Pix, QR-code payments, checkout, payment links, payment splitting, payroll, and related merchant services. The supplied content does not identify a licensing authority or license number, so the legal and regulatory disclosures should be independently validated before regulated financial activity is undertaken; this is a transparency and verification matter, not evidence of a scam. No matching broker warning was identified in the supplied third-party context.
- The homepage title identifies PagBank and its navigation exposes merchant acquiring, digital-account, card, investment, and business-solution sections.
- The site’s page summary records regulatory and contact information as present.
- No license authority or license number was identified in the supplied business-model and page-disclosure data.
- Hosting telemetry records AS13335, CLOUDFLARENET – Cloudflare, Inc., US; the site’s TLS certificate is DV, issued by WE1, and valid to 2026-10-03.
What to Verify Next
Before credential or payment interactions, independently confirm the legal entity and any applicable authorization through the relevant Brazilian corporate or financial-services registry. Review the applicable terms, withdrawal or refund conditions, fees, and payment-protection arrangements, and confirm official support channels through an independently sourced route rather than relying solely on contact details reached through the website.
- The legal and regulatory pages are the appropriate locations for confirming the responsible entity and authorization details.
- The product pages are the appropriate locations for checking fees, conditions, eligibility, and transaction terms.
- Independent confirmation is warranted because the operator’s real-world identity has not been independently verified.
Summary Verdict
Available evidence is consistent with an established, apparently legitimate website and supports a high-trust, low-risk posture for ordinary use. The classification does not independently prove the real-world operator’s identity, so legitimacy should be regarded as evidence-consistent rather than conclusively established.
Infrastructure Integrity
The site is protected by Cloudflare CDN/WAF infrastructure, with traffic delivered through Cloudflare edge servers and a potential origin candidate also present in the resolution set. This provides a meaningful mitigation against direct exposure and abuse, but protective hosting remains an infrastructure control rather than proof of legitimacy.
Closing Assessment
Ordinary engagement may proceed with proportionate care, subject to independent merchant-identity, terms-and-conditions, and payment-protection checks before credentials or funds are committed.
Written analysis generated 2026-08-17 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pagbank.com.br.
- The request stayed on pagbank.com.br. It was not redirected to another domain. Clear
- DNS for this domain is served by foundationdns.com, across 3 name servers. Noted
- The registration is paid up to 2032-05-24. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 104.18.3.88 |
| Name servers | gold.foundationdns.com, gold.foundationdns.net, gold.foundationdns.org |
| SSL issuer | WE1 |
| SSL expiry | 2026-10-03 |
| Domain age | 9.24 years (continuous registration) |
| Domain expiry | 2032-05-24 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pagbank.com.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.