Verdict
pnp.co.za appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Online grocery storefront listing categories, pricing, promotions and add-to-cart UI. Contains sign-in/register prompts and membership club references; primarily a retail product listing page. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 32 years oldRegistered history | Clear |
| Web archive | Archived since 19991707 snapshots | Clear |
| Certificate | Encrypted connectionIssued by Amazon RSA 2048 M01 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 1999.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
This website is an online supermarket storefront branded PnP, presenting grocery and household categories, product prices, promotions, delivery options, membership-club references, and sign-in or registration functions for customers purchasing physical goods online.
Scam/Impersonation Risk
No blacklist, phishing, impersonation, or conflicting legal-identity signals were observed. The homepage’s retail presentation, product catalogue, pricing, delivery workflow, and add-to-cart functionality are coherent with an established supermarket ecommerce model rather than a deceptive financial or credential-harvesting operation. Automated interaction did identify some non-whitelisted external traffic and network posts, but there was no cloaking, hidden form, password-forwarding destination, wallet activity, or clipboard manipulation; this is a limited integration and telemetry concern, not evidence of impersonation. No contradictions were observed.
- The domain registration record shows creation on 1994-12-31, an age of 31.64 years, and Lexsynergy Limited as registrar.
- The web archive records 1,707 snapshots from 1999 through 2026, spanning 28 years.
- External reputation checks recorded 0 malicious detections, 0 suspicious detections, no Google Safe Browsing malicious result, and no external blacklist result.
- Browser testing recorded 47 external XHR requests, 36 external POST requests, and 2 successful runs, with no hidden forms, password submissions to external forms, wallet-provider detection, or clipboard writes.
Regulatory Verification Notes
The site operates as a retail ecommerce service rather than presenting itself as a regulated financial product. The captured content does not state a licensing authority or license number, so any applicable consumer, retail, delivery, or payment obligations should be assessed through ordinary merchant verification rather than inferred from the site’s trust classification. A registration record names Pick n Pay Retailers Pty LTD, but the available evidence does not independently verify that this entity is the real-world operator of the website. The absence of a broker-related match is only contextual reputational information and is not a legal or licensing determination.
- The site’s captured business content presents physical-goods retail, delivery services, and membership-club activity, with no license authority or license number stated.
- The site is hosted on AS16509, operated by AMAZON-02 - Amazon.com, Inc., US.
- The transport certificate is issued by Amazon RSA 2048 M01, uses DV validation, and is valid through 2027-01-18T23:59:59+00:00.
What to Verify Next
Before credential or payment interactions, an institution or customer should independently confirm the merchant identity, applicable returns and delivery terms, and payment-protection arrangements using an official channel obtained separately from the captured page. Any applicable retail or consumer-protection registration should also be checked with the relevant authority. Contact channels should be confirmed through an independent route before resolving account or payment disputes.
- The homepage contains login, address-entry, and add-to-cart forms, while testing found no untrusted form destination.
- The supplied evidence does not include sufficient legal-page detail to independently establish the real-world operator identity.
- The captured page provides no independently verified licensing or registration reference for the retail service.
Summary Verdict
The website has a high-trust, low-risk posture and the available evidence is consistent with an established, apparently legitimate online retailer. The assessment supports normal browsing and ordinary ecommerce use, while the operator’s real-world identity remains independently unverified.
Infrastructure Integrity
The site is protected by AWS CloudFront CDN/WAF infrastructure and resolves through Amazon’s AS16509 network, with observed Amazon edge addresses. This mainstream delivery and protective infrastructure is a mitigating security signal, although infrastructure protection alone does not establish merchant identity.
Closing Assessment
Prospective users may proceed with ordinary shopping, provided standard independent checks of merchant identity, consumer terms, and payment protection are completed before submitting credentials or payment details.
Written analysis generated 2026-08-13 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pnp.co.za.
- The request stayed on pnp.co.za. It was not redirected to another domain. Clear
- Registration is published under Lexsynergy Limited. Clear
- DNS for this domain is served by co.uk, across 4 name servers. Noted
- The registration is paid up to 2026-12-31. Noted
- The earliest public archive of this site is from 1999-01-25. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Lexsynergy Limited |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 3.174.113.17 |
| Name servers | ns-2020.awsdns-60.co.uk, ns-1333.awsdns-38.org, ns-334.awsdns-41.com, ns-906.awsdns-49.net |
| SSL issuer | Amazon RSA 2048 M01 |
| SSL expiry | 2027-01-18 |
| Domain age | 31.64 years (continuous registration) |
| Domain expiry | 2026-12-31 |
| Archive first seen | 1999-01-25 |
| Archive snapshots | 1707 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pnp.co.za at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.