Verdict
refinerystore.co.za appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | A Shopify-powered online retail storefront for 'Refinery' offering clothing and accessories for men, women and children, with product listings, pricing, cart and checkout options and store locator information. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 11 years oldRegistered history | Clear |
| Web archive | Archived since 2016229 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2016.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
The website is a Shopify-powered “Refinery Stores” online retail storefront presenting clothing, footwear, and accessories for women, men, girls, boys, and children, with product listings, pricing, shopping-cart functionality, checkout, promotions, shipping and returns information, and store-locator support. Its apparent business model is direct-to-consumer apparel sales fulfilled through shipping and physical retail locations.
Scam/Impersonation Risk
No contradictions were observed. The storefront presents a coherent retail model rather than investment, cryptocurrency, or other high-risk financial activity, and the reviewed content contains no phishing, brand-impersonation, or malicious-content indicators. Automated interaction did observe hidden forms and substantial page changes, but these were attributed to the storefront’s interactive behavior: no external password form, wallet connection, wallet-drainer activity, clipboard hijacking, or cloaking was detected. The domain’s sustained historical presence and clean external reputation further support an established-site interpretation, although they do not independently prove the operator’s real-world identity.
- The homepage identifies “Refinery Stores” and provides structured categories for clothing, footwear, accessories, sales, cart, account, and checkout.
- Behavioral testing recorded 2 hidden forms across 2 runs and a maximum post-interaction DOM difference of 5,448, while recording 0 wallet-connect runs, 0 wallet-sensitive runs, 0 wallet-drainer runs, 0 clipboard-write events, and no cloaking.
- Domain registration continuity: registered 2015 (~10.83 years old).
- Web-archive coverage: 229 snapshots spanning 2016–2026 (11 years tracked), with a maximum observed gap of 1 year.
Regulatory Verification Notes
The available evidence is consistent with an established, apparently legitimate retail website, but the real-world operator identity is not independently verified. A registration record associates the domain with Pepkor IT Ltd through Lexsynergy Limited; that association should not be treated as proof that the storefront is operated by that entity. The reviewed storefront does not present a licensing claim or licensing number; for ordinary apparel retail this is primarily a disclosure and merchant-verification matter rather than evidence of wrongdoing. The transport certificate is valid but uses domain validation, which confirms control of the web address rather than the legal identity of the business.
- Domain registration record: created 2015-10-14 and expiring 2026-10-14; registrar Lexsynergy Limited; organization listed as Pepkor IT Ltd.
- Hosting telemetry: served on AS13335, Cloudflare, Inc.
- TLS telemetry: certificate issued by YE2, validation level DV, valid to 2026-10-30.
- The contact, store-locator, shipping, and returns functions are represented within the storefront’s page structure, while no licensing claim is recorded.
What to Verify Next
Before credential or payment interactions, independently reconcile the merchant identity shown on the storefront with the business responsible for fulfilment and payment processing. Confirm the applicable returns, refund, delivery, and payment-protection terms from the relevant pages, and validate published contact channels through an independent route rather than relying solely on the website. Where a jurisdiction requires retail registration or another commercial authorization, confirm the applicable record with the relevant official registry.
- The contact page and store-locator functionality provide channels for independent merchant-identity validation.
- The storefront exposes shipping and returns content as dedicated business-information topics.
- The checkout supports account login and guest-cart purchase flows, making payment-protection and refund-term review directly relevant before transaction completion.
Summary Verdict
Overall posture is high trust and low risk, with the available evidence consistent with an established, apparently legitimate retail website. The conclusion supports normal browsing and ordinary commerce, while preserving uncertainty regarding independent attribution of the real-world operator.
Infrastructure Integrity
The website is protected by Cloudflare’s CDN/WAF infrastructure and was observed through the Cloudflare edge at AS13335; no origin server address was exposed in the analysis. This reduces direct origin exposure and is a mitigating infrastructure signal, not proof of business legitimacy.
Closing Assessment
Ordinary use is proportionate, provided that merchant identity, return arrangements, and payment protections are independently confirmed before credentials or payment details are submitted.
Written analysis generated 2026-08-11 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of refinerystore.co.za.
- The request stayed on refinerystore.co.za. It was not redirected to another domain. Clear
- Registration is published under Lexsynergy Limited. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2026-10-14. Noted
- The earliest public archive of this site is from 2016-03-11. Clear
- It is hosted on CLOUDFLARENET, from a server in CA. Noted
Domain intelligence
| Registrar | Lexsynergy Limited |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | CA |
| Server IP | 23.227.38.64 |
| Name servers | brianna.ns.cloudflare.com, carmelo.ns.cloudflare.com |
| SSL issuer | YE2 |
| SSL expiry | 2026-10-30 |
| Domain age | 10.83 years (continuous registration) |
| Domain expiry | 2026-10-14 |
| Archive first seen | 2016-03-11 |
| Archive snapshots | 229 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about refinerystore.co.za at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.