Verdict
andreaboolian.com is low-trust and potentially risky.
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
| What this site appears to be | Official website for Dr. Andre Aboolian, a Beverly Hills board-certified plastic surgeon. Site describes surgical and non-surgical services, showcases galleries and reviews, provides contact form, phone number and office address. No signs of credential harvesting or high-risk financial schemes in page content. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 24 years oldRegistered history | Clear |
| Web archive | Archived since 2004Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2004.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website presents itself as the official online presence of Dr. Andre Aboolian, MD, FACS, a Beverly Hills plastic surgery practice offering surgical and non-surgical cosmetic procedures, consultations, before-and-after galleries, patient reviews, and appointment contact options.
Scam/Impersonation Risk
The site’s visible healthcare content is coherent and does not contain credential-harvesting forms, login functionality, wallet activity, or an obvious financial scheme. However, the domain carries a confirmed blacklist listing from multiple external sources, including malicious detections, which is a material contradiction to the otherwise professional presentation. The homepage also contains an unrelated promotional passage about “Grand Rush Casino” and an external link associated with that subject, inconsistent with a medical-practice website and indicative of possible content contamination or unauthorized modification. Behavioral testing further recorded substantial page changes after interaction and non-whitelisted external requests; these signals do not establish phishing or impersonation on their own, but they reinforce the need for a security-forward posture.
- External reputation telemetry recorded 2 malicious and 1 suspicious detections, with the domain listed by 2 external blacklist sources.
- The homepage presents plastic-surgery services but also includes unrelated online-casino text and an external casino-related profile link.
- Behavioral testing recorded 4,535 DOM mutations, a maximum post-interaction DOM difference of 4,535, 12 external XHR requests, and 4 external POST requests.
- Domain registration telemetry records creation on 2002-12-04T23:44:06Z and an age of 23.72 years; the historical record spans 2004-03-23 through 2025-10-23, covering 22 tracked years.
Regulatory Verification Notes
The site identifies the practice and physician, provides a telephone number, office address, contact and appointment forms, and links to social and review platforms. These details support a likely connection to a real-world medical practice, but the available evidence does not independently verify the operator’s identity or establish professional licensing. The site does not present a license number or licensing authority, and its disclosure position is therefore unclear. This is a regulatory-verification gap rather than, by itself, proof of fraud.
- The homepage and about content identify “Andre Aboolian, MD, FACS” and describe a Beverly Hills plastic-surgery practice.
- The contact page provides a telephone number, office address, and appointment/contact functionality; testing found no sensitive password form.
- No license number or licensing authority is stated in the available business and legal content.
- The domain is registered through NETWORK SOLUTIONS, LLC.; the recorded expiration date is 2032-12-04T23:44:06Z.
What to Verify Next
Before any appointment, payment, financing arrangement, or submission of personal or medical information, an independent check should confirm the physician and practice through the relevant state medical licensing registry and confirm that the listed office independently recognizes the website and its contact details. Any payment or financing process should be initiated only through a separately verified channel, with the practice’s written cancellation, refund, privacy, and patient-record procedures reviewed in advance.
- The site offers paid consultations, procedures, associated patient services, and references financing options.
- The site provides a contact form and appointment form but does not display a license number or licensing authority.
- The site links to external social and review platforms, which can be used as independent corroboration of the practice’s current contact and location details.
Summary Verdict
The overall posture is low trust with elevated risk for sensitive interaction. The apparent medical-practice identity is plausible, but the confirmed external threat detections and blacklist status outweigh the site’s professional presentation and established domain history. Identity remains likely rather than independently verified.
Infrastructure Integrity
The site is hosted on Google Cloud in the United States, with no CDN detected and likely origin infrastructure directly associated with the hosting environment. The confirmed technical evidence identifies AS15169, Google LLC; transport encryption uses a DV certificate issued by YR2, valid through 2026-10-24. These are normal infrastructure characteristics and provide limited mitigation, but they do not resolve the external reputation contradiction.
Closing Assessment
The site should be treated as read-only until the practice, licensing, contact channels, and any payment pathway are independently confirmed; credentials, medical information, and financial details should not be submitted during that interim.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - The page exchanged network traffic with destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_TRAFFIC - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - The page made background requests to destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_XHR - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 79/100 |
| Identity verification confidence | 78% |
- Trusted social count=3
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of andreaboolian.com.
- The request stayed on andreaboolian.com. It was not redirected to another domain. Clear
- Registration is published under NETWORK SOLUTIONS, LLC.. Clear
- DNS for this domain is served by siteground.net, across 2 name servers. Noted
- The registration is paid up to 2032-12-04. Clear
- The earliest public archive of this site is from 2004-03-23. Clear
- It is hosted on GOOGLE, from a server in US. Noted
Domain intelligence
| Registrar | NETWORK SOLUTIONS, LLC. |
|---|---|
| Hosting | GOOGLE - Google LLC, US |
| Country | US |
| Server IP | 35.215.104.199 |
| Name servers | NS1.SITEGROUND.NET, NS2.SITEGROUND.NET |
| SSL issuer | YR2 |
| SSL expiry | 2026-10-24 |
| Domain age | 23.72 years (continuous registration) |
| Domain expiry | 2032-12-04 |
| Archive first seen | 2004-03-23 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about andreaboolian.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.