Verdict
smallpdf.com appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official product landing for Smallpdf, describing a suite of PDF tools, pricing plans (Pro, Team), mobile apps, and security/compliance claims. Primary call-to-actions: Start Free Trial, Explore Tools, Download Apps. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 14 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by Amazon RSA 2048 M01 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
Smallpdf is a cloud-based software service that provides online PDF and document tools, including conversion, compression, editing, electronic signatures, AI-assisted document functions, mobile applications, and subscription plans for individual Pro and Team users.
Scam/Impersonation Risk
No contradictions were observed across the available evidence: there are no phishing, impersonation, conflicting-identity, or confirmed malicious-reputation indicators. The homepage presents a coherent SaaS business model with clearly described PDF functions, free tools, subscription calls to action, mobile applications, and legal or security-related links. Two suspicious inline scripts were observed during behavioral analysis, but the same analysis found no hidden forms, externally posted passwords, wallet activity, clipboard manipulation, cloaking, or other high-risk abuse pattern; this is therefore a limited technical anomaly rather than evidence of impersonation or fraud.
- The homepage identifies the service as Smallpdf and presents PDF conversion, compression, editing, signing, AI document tools, pricing, Teams, and mobile applications.
- External reputation checks recorded 0 malicious and 0 suspicious detections, with no phishing or malicious-site result and no matched broker warning.
- The domain was registered in 2013 and is approximately 13.5 years old.
Regulatory Verification Notes
The available evidence is consistent with an established, apparently legitimate software provider, but it does not independently verify the real-world operator identity. The registration record associates the domain with Manuel Stofer and Smallpdf GmbH; this is an administrative registration signal, not proof that the operating entity has been independently authenticated. The site presents Pro and Team subscription offerings and security/compliance claims, but no license or registration number is identified in the supplied page evidence. For this non-financial SaaS business model, that is a disclosure point for ordinary commercial verification rather than an indication of wrongdoing.
- The domain registration record lists DYNADOT LLC as registrar, with creation on 2013-02-13 and expiry on 2030-02-13.
- The hosting record identifies AS16509, Amazon.com, Inc. (AMAZON-02), United States.
- The site’s transport encryption uses a DV certificate issued by Amazon RSA 2048 M01, valid through 2027-01-12.
- The homepage describes Pro and Team pricing, free-tier tools, mobile apps, and security/compliance claims; no license number is supplied in the available content.
What to Verify Next
Before credential or payment interactions, an organization should independently confirm the merchant identity associated with the subscription, review cancellation, renewal, refund, and data-processing terms, and confirm that the payment method provides appropriate dispute or payment-protection mechanisms. Any applicable company registration or sector-specific authorization should be checked against the relevant official registry, and official support channels should be confirmed through an independent route.
- The homepage provides the commercial entry points through “Start Free Trial,” pricing, Teams, and account-related functions.
- The available page analysis identified signup and contact forms without a sensitive-form or untrusted-destination finding.
- The site presents legal and security-related links that can be used as the starting point for reviewing contractual and data-handling terms.
Summary Verdict
The available evidence supports a high-trust, low-risk posture and is consistent with an established, apparently legitimate website. No scam or impersonation contradictions were observed, although the operator’s real-world identity is not independently verified.
Infrastructure Integrity
The website is protected by Amazon CloudFront CDN/WAF infrastructure. All observed addresses were CDN edge servers, with no origin candidate identified; this reduces direct origin exposure and is a mitigating infrastructure characteristic, not independent proof of legitimacy.
Closing Assessment
Normal browsing and ordinary service evaluation are proportionate to the assessment; credentials or payments should proceed only after the stated merchant, contractual, and payment-protection checks are satisfactory.
Written analysis generated 2026-08-11 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of smallpdf.com.
- The request stayed on smallpdf.com. It was not redirected to another domain. Clear
- Registration is published under DYNADOT LLC. Clear
- DNS for this domain is served by awsdns-07.org, across 4 name servers. Noted
- The registration is paid up to 2030-02-13. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | DYNADOT LLC |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 18.165.122.104 |
| Name servers | NS-1082.AWSDNS-07.ORG, NS-1687.AWSDNS-18.CO.UK, NS-264.AWSDNS-33.COM, NS-928.AWSDNS-52.NET |
| SSL issuer | Amazon RSA 2048 M01 |
| SSL expiry | 2027-01-12 |
| Domain age | 13.50 years (continuous registration) |
| Domain expiry | 2030-02-13 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about smallpdf.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.