Verdict
onlyaesthetics.sg shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Marketing and booking site for Only Aesthetics, a Singapore-based aesthetics clinic chain offering many branded treatments, AI tools, memberships, and online booking. Payment rails shown (Visa, Stripe, MasterCard). Primary CTA is to book consultations or request services. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 4 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 16 years oldRegistered history | Clear |
| Web archive | Archived since 2011Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2011.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a commercial marketing, booking, and e-commerce site for Only Aesthetics, presenting a Singapore-based aesthetics clinic chain with branded treatments, AI skin and scalp tools, memberships, product sales, and consultation booking supported by card-payment options.
Scam/Impersonation Risk
The site presents a coherent clinic and e-commerce model, and its page analysis found no login form, credential-harvesting form, wallet-connect activity, or apparent brand-impersonation content. However, this benign presentation is materially outweighed by confirmed external threat detections and blacklist status, creating a serious risk for sensitive interactions. Behavioral analysis also identified suspicious inline scripts and substantial page changes after interaction; these signals do not establish the exact mechanism or intent, but they reinforce the need to treat the site as unsafe for credentials, account access, or payment activity. No conflicting legal-entity names, direct impersonation claim, or confirmed phishing page was observed. No separate suspicious contact-email anomaly was reported.
- The homepage presents Only Aesthetics as a commercial aesthetics clinic with treatment marketing, consultation booking, memberships, product sales, and card-payment rails.
- External reputation assessment recorded 4 malicious detections and 2 suspicious detections among 11 evaluated results, together with a confirmed blacklist indication from 2 sources.
- Browser analysis recorded 2 suspicious inline scripts, 7,311 DOM mutations, a maximum post-interaction DOM difference of 7,311, and 8 console errors.
- The domain was registered on 2011-01-20 and is approximately 15.59 years old; archival records show 124 snapshots spanning 2011–2026, covering 16 tracked years.
Regulatory Verification Notes
The available content identifies the commercial brand and healthcare/aesthetics business model, but the supplied site signals do not record a licensing authority or registration number. This is a regulatory-transparency gap requiring independent confirmation, not by itself evidence of fraud. The available evidence does not independently verify the real-world operator or establish regulated status. Registration is recorded through GoCloudEasy Pte. Ltd.; that administrative fact does not resolve the licensing question. A separate broker-reputation dataset returned no match, which provides limited contextual information and is not a legal or regulatory determination.
- The homepage and service content identify Only Aesthetics and describe clinic treatments, AI tools, memberships, and booking functions.
- No license authority or license number is recorded in the supplied business-model and page-disclosure signals.
- Domain registration records list GoCloudEasy Pte. Ltd. as registrar and an expiration date of 2027-01-20.
- The site's transport encryption is a DV certificate issued by YR1, valid through 2026-10-07.
What to Verify Next
Independent confirmation should be completed before any sensitive interaction. The operator’s legal entity should be matched to the applicable Singapore business and healthcare or aesthetics licensing registries, and the specific treatment provider and clinic location should be confirmed through independently sourced contact details. Payment arrangements should be validated directly with the payment provider, with no reliance on links or contact details presented only within the site. Any request for account credentials, identity documents, or unusual payment instructions should be escalated for review rather than completed.
- The supplied disclosure signals contain no recorded licensing authority or registration number to compare against an official registry.
- The site provides a booking and lead-capture form but no login form; contact and booking channels therefore require independent confirmation before use.
- The page analysis identifies Visa, Stripe, and MasterCard payment references, providing specific payment rails to validate independently.
Summary Verdict
The overall posture is critical risk, driven by converging external threat and reputation contradictions despite a professionally presented commercial website and a long-running domain history. The site’s apparent business identity remains plausible, but the available evidence does not support trust for sensitive interactions.
Infrastructure Integrity
The site resolves directly to a single likely origin address, with no CDN detected in the observed resolution. The confirmed technical hosting facts are AS59253, LEASEWEB-APAC-SIN-11 operated by Leaseweb Singapore Pte. Ltd., Singapore; this infrastructure is a neutral technical observation and does not offset the external reputation findings.
- Hosting infrastructure: AS59253, LEASEWEB-APAC-SIN-11, LEASEWEB SINGAPORE PTE. LTD., SG.
- The observed server IP is 23.106.50.9 in Singapore, with 1 unique IP and 1 likely origin IP.
- No CDN was detected; the infrastructure record indicates 0 edge IPs.
- TLS validation level is DV; issuer YR1; certificate expiry is 2026-10-07T05:05:18+00:00.
Closing Assessment
Sensitive use should remain suspended unless independent operator, licensing, contact-channel, and payment validation materially resolves the identified concerns; read-only review is the appropriate interim posture.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page carried inline scripts written in a style TrustSniffer treats as suspicious.Behaviour in a sandbox
rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 79/100 |
| Identity verification confidence | 78% |
- Trusted social count=3
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of onlyaesthetics.sg.
- The request stayed on onlyaesthetics.sg. It was not redirected to another domain. Clear
- Registration is published under GoCloudEasy Pte. Ltd.. Clear
- DNS for this domain is served by cldy.com, across 3 name servers. Noted
- The registration is paid up to 2027-01-20. Noted
- The earliest public archive of this site is from 2011-01-29. Clear
- It is hosted on LEASEWEB-APAC-SIN-11, from a server in SG. Noted
Domain intelligence
| Registrar | GoCloudEasy Pte. Ltd. |
|---|---|
| Hosting | LEASEWEB-APAC-SIN-11 - LEASEWEB SINGAPORE PTE. LTD., SG |
| Country | SG |
| Server IP | 23.106.50.9 |
| Name servers | ns4.cldy.com, ns5.cldy.com, ns6.cldy.com |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-07 |
| Domain age | 15.59 years (continuous registration) |
| Domain expiry | 2027-01-20 |
| Archive first seen | 2011-01-29 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 4 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about onlyaesthetics.sg at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.