Verdict
royalcuts.co.uk shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Website for Royal Cuts, a UK barber shop offering haircuts, fades, shaves and other grooming services. Includes pricing, opening hours, contact phone, email, and street address with a call-to-action to make an appointment. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 9 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 201631 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2016.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Royal Cuts is presented as a UK barber-shop website offering haircuts, skin fades, children’s and senior cuts, beard trims, hot-towel shaves, waxing, hair washing, opening hours, contact details, and appointment booking for an apparent brick-and-mortar grooming business.
Scam/Impersonation Risk
The site’s visible content is consistent with a local barber service and contains no detected impersonation pattern, phishing form, cryptocurrency feature, or other on-page abuse indicator. However, this benign presentation is outweighed by decisive external threat signals: the domain is confirmed on blacklist sources, 11 security detections classify it as malicious, three classify it as suspicious, and a Tier-1 security vendor has flagged it. The result is a critical sensitive-interaction risk despite the ordinary business model. No identity contradiction between multiple legal-entity names was observed, but the real-world operator remains unverified.
- Homepage: presents Royal Cuts as a local barber shop with service prices, opening hours, a telephone number, address, and appointment prompt; no login or sensitive-data form was detected.
- External reputation telemetry: 11 malicious detections and 3 suspicious detections from 19 effective evaluations; Fortinet was among the flagged vendors.
- WHOIS registration record: created 2025-12-15T22:56:16Z, registered through GoDaddy.com, LLC., with an age of 0.79 years.
- Archive record: 31 snapshots, first seen 2016-01-09T22:10:27Z and last seen 2016-10-19T04:09:15Z, with 11 years tracked.
Regulatory Verification Notes
The available pages describe services and appointment arrangements but do not clearly establish a legal entity, licensing basis, or independently verified operator identity. For a barber business, the absence of a displayed financial-services licence is not itself anomalous; nevertheless, the site’s legal and governance disclosure is insufficient to resolve who operates it. The available third-party broker dataset did not match the site, which provides no positive regulatory conclusion. The malicious and blacklist findings are reputational security signals rather than a legal or licensing determination.
- About and homepage content: identifies the trading name “Royal Cuts” and describes barbering services, but does not clearly provide an independently verified legal-entity identity.
- Contact and appointment content: provides a telephone contact, street-address reference, opening hours, and appointment call to action, but no independently validated registration or licensing reference.
- Transport encryption: TLS certificate issued by YR1 with DV validation, valid to 2026-11-05T08:19:48+00:00.
- Technical hosting record: served from AS31898, identified as ORACLE-BMC-31898 - Oracle Corporation, US.
What to Verify Next
Any prospective engagement should first confirm that the physical premises, telephone number, and trading name correspond to an independently located business, rather than relying solely on the website. The official contact route and appointment destination should be confirmed through an offline or independently sourced channel, and any payment request should be checked for a named merchant and appropriate consumer protections. Given the security detections, credentials and financial details should not be submitted unless the domain has been cleared through an independent security review.
- Homepage: supplies the business name, service catalogue, opening hours, telephone contact, and appointment prompt for independent cross-checking.
- Contact content: supplies the stated address and contact details that can be compared with an external business directory or physical-premises confirmation.
- Appointment workflow: the captured site contained no sensitive form, login form, or external password form, but the existence and destination of any live booking process should be checked separately.
Summary Verdict
The website presents a plausible local-service narrative, but the confirmed blacklist status and multiple malicious detections create a critical trust posture for sensitive interaction. The operator’s real-world identity is unverified, and the ordinary appearance of the pages does not neutralize the external security evidence.
Infrastructure Integrity
The site resolves directly to one identified origin address rather than a CDN edge, with hosting attributed to Oracle Corporation in the United States. No CDN or WAF protection was detected; this is a neutral infrastructure observation and does not establish legitimacy.
Closing Assessment
The appropriate posture is passive review only; account credentials, payment details, downloads, and other sensitive interactions should be withheld until the security findings and business identity have been independently cleared.
Written analysis generated 2026-10-01 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by governance, external reputation, registration and ownership, page content, behaviour in a sandbox.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
04 Page content
- The page has no description for search engines, which established sites usually provide.Page content
rule:PAGE_SEO_MISSING_META
05 Behaviour in a sandbox
- The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of royalcuts.co.uk.
- The request stayed on royalcuts.co.uk. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com, LLC.. Clear
- DNS for this domain is served by com., across 2 name servers. Noted
- The registration is paid up to 2030-12-15. Clear
- The earliest public archive of this site is from 2016-01-09. Clear
- It is hosted on ORACLE-BMC-31898, from a server in US. Noted
Domain intelligence
| Registrar | GoDaddy.com, LLC. |
|---|---|
| Hosting | ORACLE-BMC-31898 - Oracle Corporation, US |
| Country | US |
| Server IP | 173.254.56.14 |
| Name servers | ns1.rhostjh.com., ns2.rhostjh.com. |
| CDN / edge network | Not detected |
| Resolved IP addresses | 1 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 1 |
| SSL issuer | YR1 |
| SSL expiry | 2026-11-05 |
| Domain age | 0.79 years (continuous registration) |
| Domain expiry | 2030-12-15 |
| Archive first seen | 2016-01-09 |
| Archive snapshots | 31 |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about royalcuts.co.uk at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.