Domain Due Diligence
Report for Quilter.com
Why we think so
✅ Verdict: Safe / Trusted — Quilter (quilter.com) appears to be a legitimate, UK-based wealth manager and platform. The site shows substantial traffic (~495k monthly), an extended UK audience, verified contact details and corporate DNS/SSL records (EV SSL). There are some customer-service complaints and a recorded provision (~£76M) for remediation of adviser services; those are service-quality issues rather than evidence of fraud. No phishing or crypto blacklist matches were found in the scanned sources. Overall: proceed with normal caution (verify contacts before sending money).
Risk Insights
High-traffic, UK-focused corporate site
No blacklist matches found
Service-quality remediation noted
Contradictory Signals
The domain is technically clean and well-managed, but the company has operational/regulatory issues tied to adviser services.
Signal A: No blacklist/phishing indicators
Signal B: Significant remediation provision (£76M) for service failures
Category Scores
Red Flags & Warnings
-
Quilter has set aside ~£76M for remediation tied to adviser service shortfalls, indicating past service failures and some customer complaints.
-
Presence of many domain verification TXT records and third‑party integrations — while normal for an enterprise, these increase the attack surface if internal controls slip.
🔎 Detailed Checks & Analysis
Domain age & registrar check
Domain age & registrar check
"Registrar CSC and established name servers (netnames) are typical for large UK firms; no recent suspicious transfers were detected."
Reason: Registrar is a corporate registrar (CSC) and historical WHOIS indicates long-term registration consistent with a legitimate brand.
SSL / TLS & certificate validity
SSL / TLS & certificate validity
"Certificate (DigiCert EV RSA CA G2) valid from 2025-07-01 to 2026-02-06; presence of CAA records shows some certificate issuance controls."
Reason: EV TLS certificate issued by DigiCert and currently valid; HTTPS in use across the site.
Traffic & engagement signals
Traffic & engagement signals
"SimilarWeb and SimilarTech report consistent traffic patterns and a dominant UK visitor base (~97%), which reduces likelihood of an isolated scam site."
Reason: High monthly visits (~494k) and deep engagement (≈7.6 pages/visit) consistent with an active corporate site.
Reputation & news presence
Reputation & news presence
"News items show hires, partnerships and research reports. There are service-quality complaints and a remediation provision, which are reputational negatives but not indicators of fraud."
Reason: Multiple recent press releases and corporate news items; no major fraud allegations found in the scanned news sources.
Blacklist / phishing / malware indicators
Blacklist / phishing / malware indicators
"Scanned blacklist sources show no active phishing/malware flags; continue to re-check periodically since flags can appear later."
Reason: No Google Safe Browsing matches, and crypto-scam scanner returned no blacklist hit for the domain.
Contact details & ownership signals
Contact details & ownership signals
"Emails like ask@quilter.com and a public press office address appear on multiple official pages; these facilitate direct verification."
Reason: Public corporate emails, phone numbers and social profiles are present and match the brand.
Trademark conflict / brand impersonation (USPTO)
Trademark conflict / brand impersonation (USPTO)
"No matching USPTO records returned for 'quilter.com' in the brief search, though full global trademark checks would be broader."
Reason: No conflicting trademarks found in a quick USPTO search for the query, lowering simple trademark-conflict risk in US filings.
Legal & regulatory flags
Legal & regulatory flags
"Provision relates to service delivery shortfalls and client remediation; this reduces the legal/regulatory score but is not the same as fraud or criminal activity."
Reason: Company has recorded a ~£76M provision for remediation of adviser services, indicating regulatory and customer-service issues.
Your Next Steps
-
1Verify contact addresses before sharing money or personal data — use ask@quilter.com or official phone numbers listed on the site and cross-check via the site’s Help & Support pages.
-
2If you’re dealing with financial advice/offers, confirm the adviser is FCA-registered using the Financial Conduct Authority register in the UK.
-
3Report any suspicious emails or lookalike websites to Quilter (their published guidance covers impersonation scams) and to your bank if payment was requested.
-
4Avoid sending funds in response to unsolicited approaches; confirm identity by calling a published number from the site rather than replying to an email.
-
5Keep records (screenshots, emails) and escalate to your local consumer protection or the UK’s Action Fraud if you suspect criminal impersonation.
Evidence & Citations
-
SimilarTech — site profile for quilter.com (traffic, tech stack)
Traffic ~494.7k/month, UK top country, and a detailed list of enterprise technologies (Cloudflare, Adobe Marketing Cloud, Google Analytics).
-
SimilarWeb — Quilter traffic and engagement snapshot (Aug 2025)
Shows ~494,698 visits (Aug 2025), 97% UK audience, bounce rate ~29.6% and pages/visit ≈7.6 — consistent with a corporate financial site.
-
WHOIS / DNS / SSL scan for quilter.com
Registrar CSC Corporate Domains, multiple TXT verification records, CAA entries, and an EV TLS certificate issued by DigiCert (valid).
-
Site-scraped contacts for quilter.com
Listed corporate emails (ask@quilter.com, pressoffice@quilter.com), phone numbers and active social media channels — useful for verification.
-
Google Safe Browsing / crypto blacklist scan
No matched threats found; no crypto-scam blacklist entry detected for the domain.
-
Quilter media / news feed (recent press and announcements)
Multiple recent press items and corporate announcements (hires, partnerships, reports) showing ongoing business operations.
🕵🏻 Keep investigating
Run another instant due diligence scan on any website URL. Verify before you trust!
Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...
Read playbook →Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...
Read playbook →