pwnforums.st
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of pwnforums.st
pwnforums.st appears to be a forum-style website, likely oriented around discussion communities based on the "forums" naming pattern in the domain. The "pwn" term is commonly associated with hacking, exploitation, or cybersecurity subcultures, so the site may be intended for technical discussion, underground community activity, or related niche topics rather than mainstream consumer use.
Based on the available domain and infrastructure data, the site is relatively new and uses Cloudflare-hosted web infrastructure with a valid TLS certificate. No clear business, publisher, or organizational identity is provided in the scan data, so the operator cannot be confidently identified from the available information alone.
Safety Assessment for pwnforums.st
This domain shows multiple risk indicators at the time of this scan. It was flagged by 16 security engines, with many of those detections classifying the site as phishing or otherwise malicious. In addition, blacklist checks show listings in two threat-database sources, although broader content-malice databases in this scan did not report a hit. The domain is also very new, which can increase uncertainty because newly registered domains are more commonly associated with short-lived abuse campaigns.
The supplemental malware scan produced mixed signals: it reported no flagged files, but it did label the domain and two internal resource URLs with generic malicious classifications. Those generic labels are less conclusive on their own, but in this case they are accompanied by substantial multi-engine phishing detections, which raises the overall level of concern. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL/TLS certificate and is served through Cloudflare infrastructure on IP address 104.26.1.107, with nameservers also delegated to Cloudflare. This setup may provide CDN and traffic-filtering benefits, but it does not by itself indicate legitimacy. The reported hosting location is Toronto, Canada.
From a domain-security perspective, DNSSEC appears to be unsigned, which means DNS responses may not benefit from DNSSEC validation. The domain is also very recently registered and has a short operating history so far, which can make reputation assessment less stable at this stage.
Share your experience with this website. Was it safe? Did you encounter any issues?