Verdict
kodakexpressedinburgh.co.uk shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Local Kodak Express franchise page listing photography and print services and products. Typical retail/service site with product/service categories and contact/navigation links; no evident forms or financial/personal-data collection beyond standard commerce expectations. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 5 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 13 years oldRegistered history | Clear |
| Web archive | Archived since 2008Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2008.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website presents itself as a local Kodak Express photography and print-service business, offering in-store photo printing, passport and identification photographs, film processing, scanning, personalised photo gifts, photo restoration, and related retail products. Its apparent business model is ordinary local-service and ecommerce activity based on one-time customer transactions.
Scam/Impersonation Risk
The site’s visible content is consistent with a conventional photography and printing business: it lists services such as digital prints, passport photographs, film processing, photo books, canvas products, personalised gifts, and video transfers, and it shows no login form, credential-harvesting mechanism, financial scheme, or explicit brand-impersonation indicator. That benign presentation does not resolve the more serious external contradiction: the domain has multiple malicious threat detections and is recorded as blacklisted by external sources. Accordingly, the absence of an obvious phishing mechanism on the captured pages should not be treated as clearance for sensitive interaction. No identity contradiction, direct phishing indicator, or explicit impersonation signal was observed in the page content, but the confirmed blacklist remains decisive for the risk posture.
- The homepage identifies “KODAK Express” and lists photography, printing, film-processing, scanning, and personalised-gift services.
- The captured homepage contained no login form, hidden sensitive form, password-submission form, wallet connection, or clipboard-hijacking behavior.
- External reputation checks recorded 5 malicious detections and 1 suspicious detection, including a Tier-1 threat flag, with `external_blacklist` set to true.
- The domain was registered on 2013-04-15T10:57:32Z and is approximately 13.35 years old through GoDaddy.com, LLC.; archival records show 149 snapshots spanning 2008–2026, covering 19 tracked years.
Regulatory Verification Notes
The apparent retail business model is not itself a regulated financial activity, and no broker-dataset match was identified. However, the available evidence does not independently verify the real-world operator behind the site, and the on-page disclosure position is unclear. The absence of a stated licensing claim or registration number is therefore a transparency item for verification rather than, by itself, proof of misconduct. The external blacklist and threat detections should remain separate from any licensing conclusion: they are security and reputational signals, not a legal or regulatory determination.
- The business profile describes revenue from photo prints, personalised gifts, film processing, frames, ink cartridges, and related one-time retail or service transactions.
- The available page material provides service navigation and contact-related links but does not independently establish the operating legal entity or a licensing authority.
- The site is hosted on AS398101, GoDaddy.com, LLC, US.
- Its transport certificate is DV, issued by YR2, and valid to 2026-09-22T15:53:26+00:00.
What to Verify Next
Before any sensitive interaction, independently confirm that the physical Kodak Express location, telephone details, and franchise relationship correspond to the business represented by the domain. Confirm the operating entity through an authoritative business registry and, where the planned service requires it, check any applicable local permits or regulatory requirements directly with the relevant authority. Contact details should be validated through an independently sourced, offline route rather than relying solely on information presented by the website. Until those checks are complete, account creation, credential submission, payment, or transmission of personal photographs and identification documents should not proceed.
- The homepage presents a local-service structure with “Find Us,” “Contact,” “About Us,” and service-category navigation suitable for independent location and business verification.
- The captured site had no sensitive forms, login functionality, or untrusted form destination, so verification can begin through independently obtained business and contact records.
- The available identity-verification status is unverified, leaving the connection between the website and a real-world operator unresolved.
Summary Verdict
The overall posture is critical risk for sensitive interaction. The site’s ordinary retail presentation is outweighed by confirmed external threat and blacklist signals, while the operator’s real-world identity remains unverified. Passive viewing may be possible, but the available evidence does not support treating the website as trustworthy for credentials, personal-data submission, payments, or other consequential activity.
Infrastructure Integrity
The site resolves to a single GoDaddy-hosted address, with no CDN detected and a directly observable hosting arrangement. This provides basic infrastructure attribution but no meaningful assurance of legitimacy; transport encryption is present, yet a domain-validated certificate confirms encryption of the connection rather than the identity or trustworthiness of the operator.
Closing Assessment
The proportionate security position is to restrict activity to passive viewing until independent business, franchise, and contact verification has been completed, and to avoid login, credential, personal-document, and financial interactions in the interim.
Written analysis generated 2026-08-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of kodakexpressedinburgh.co.uk.
- The request stayed on kodakexpressedinburgh.co.uk. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com, LLC.. Clear
- DNS for this domain is served by com., across 2 name servers. Noted
- The registration is paid up to 2027-04-15. Noted
- The earliest public archive of this site is from 2008-11-21. Clear
- It is hosted on GO-DADDY-COM-LLC, from a server in US. Noted
Domain intelligence
| Registrar | GoDaddy.com, LLC. |
|---|---|
| Hosting | GO-DADDY-COM-LLC - GoDaddy.com, LLC, US |
| Country | US |
| Server IP | 198.12.238.211 |
| Name servers | ns03.domaincontrol.com., ns04.domaincontrol.com. |
| SSL issuer | YR2 |
| SSL expiry | 2026-09-22 |
| Domain age | 13.35 years (continuous registration) |
| Domain expiry | 2027-04-15 |
| Archive first seen | 2008-11-21 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 5 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about kodakexpressedinburgh.co.uk at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.