Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
pawnsapp.pro shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 7 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself as a consumer "extra income" application, with a homepage titled "Earn Effortlessly With the Ultimate Extra Income App | Pawns.app". It promotes passive earnings through an app and also offers account sign-in with password entry. Its apparent business model is recruiting users into an earn-money-passively proposition. The site's relationship to any established brand of similar name is not independently established.
Scam/Impersonation Risk
Contradictory signals are present, and they are decisive. A major security vendor currently flags the domain as malicious, and further scanners rate it suspicious. This external detection qualifies as a confirmed blacklist hit. The detection does not specify the category of threat, so its exact nature remains unattributed. No conflicting legal identities were observed, and no phishing page or wallet-drainer behavior was confirmed. Even so, the combined picture is that of a very recently created domain, a brand-style title promising effortless income, and an active threat listing. This combination matches the profile of an income-scheme or brand-lookalike property. The domain's lookalike pattern is an inference from naming and timing, not a proven impersonation. Behavioral testing of the homepage also showed conduct inconsistent with a simple earning-app landing page. The page issued a very large volume of third-party requests, including numerous background POST submissions to destinations outside the expected set. It also ran a suspicious inline script, produced heavy console errors, and rewrote a large share of its page structure after user interaction. The page exposes password-entry forms, so these external data flows are directly relevant to any credentials a visitor might type. Clipboard manipulation, hidden forms and wallet-connection behavior were not observed.
- Homepage: the title promotes effortless extra income under an app-style brand name, on a domain registered only days earlier.
- Homepage behavior: heavy third-party request activity, including 40 external POST requests (11 to non-whitelisted destinations) and 44 external XHR calls, alongside password-entry forms.
- Homepage behavior: 1 suspicious inline script, 32 console errors, and a page structure rewritten by roughly 4,000 DOM changes after interaction.
- Domain registered 2026-10-13 (~8 days old) via NICENIC International Group Co., Limited. Web archive holds 2 snapshots, both captured 2026-10-14, so there is no meaningful operating history.
Regulatory Verification Notes
The site does not establish any verifiable corporate or regulatory standing. No operating entity, registration number or licensing status could be tied to it. Governance and ownership are opaque, which here compounds the reputational concerns instead of being a mere administrative detail. This is a disclosure gap and not, by itself, proof of wrongdoing. Here, though, it sits alongside a confirmed external threat detection and a domain only days old. No third-party broker or regulator listing matched this site, so there is no external record to corroborate the site's claims. The transport certificate is valid, but it is domain-validated only and confirms nothing about who operates the site.
- Homepage and legal pages: no identifiable operating company, licence or registration reference could be tied to the site.
- Transport encryption: TLS certificate issued by YE1 (DV), valid to 2027-01-11.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- No broker or regulatory-listing match exists for the site or its brand name.
What to Verify Next
Any claim of affiliation with an established "Pawns.app" brand should be checked against that brand's own official channels, reached independently and not via links on this site. The earnings, payout and withdrawal terms should be confirmed there before any account is created. The operator's legal entity and licensing position should be checked with the relevant registry. Official support and contact channels should also be confirmed through an independent route. Until the threat detection is cleared, no software should be downloaded from the site.
- Homepage: income and earning claims should be validated against the official brand source.
- Legal pages: no entity name is stated, so registry lookups have nothing to anchor on until one is obtained.
- External reputation: the current detection should be rechecked after the operator publishes a remediation or clarification.
Summary Verdict
The site carries an elevated, clearly cautionary risk posture. Confirmed external threat detections and the site's very recent creation converge with intrusive behavior in testing. Neither the site's technical hygiene nor its protective hosting offsets these signals, and no evidence supports treating it as legitimate.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The origin server could not be observed. Cloudflare's bot protection was active during testing, with no cloaking detected. This is a mitigating factor only. Edge-only visibility prevents independent verification of the true host and can mask rapid content swaps, and the protection does not offset the reputational risk.
Closing Assessment
Read-only viewing, if any, is the outer limit of appropriate interaction. Account sign-in, credential entry, payment or financial activity, and any downloads should be avoided until the threat listing is cleared and the operator's identity is independently confirmed.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, history in the web archive.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 Behaviour in a sandbox
- The page carried inline scripts written in a style TrustSniffer treats as suspicious.Behaviour in a sandbox
rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pawnsapp.pro.
- The request stayed on pawnsapp.pro. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-13. Noted
- The earliest public archive of this site is from 2026-10-14. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3034::ac43:9cd5 |
| Name servers | michelle.ns.cloudflare.com, howard.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2027-01-11 |
| Domain age | 0.02 years (continuous registration) |
| Domain expiry | 2027-10-13 |
| Archive first seen | 2026-10-14 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pawnsapp.pro at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.