Is 227gp.com a scam? TrustSniffer's high-risk assessment: 5/100

Overview

The site is a single-page web presence for 227gp.com. Its page title presents it as the official website of a Russian-language city polyclinic ("Городская поликлиника №227"), so a visitor sees what looks like a public healthcare institution's portal. Its apparent purpose is to pass as the online face of a municipal medical facility. No independent evidence ties the domain to any such institution, and the surrounding technical and reputational record is strongly adverse.

Scam/Impersonation Risk

The principal concern is the reputational record. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, and it is listed on an external blacklist. This is a confirmed adverse listing, not a soft reputational hint. It sits poorly with the page's claim to be an "official site" of a municipal clinic. A genuine public-health institution would be expected to sit on a long-established, institutionally anchored domain. This one is only a few months old, and nothing independently links it to a real clinic. Healthcare branding is also a common lure for credential and personal-data harvesting, because visitors readily accept appointment, patient-account and insurance requests. No conflicting legal entities were found, no wallet-draining, clipboard-hijack or cloaking behaviour was observed, and no hidden or external-posting password forms were detected. The listings are therefore the decisive adverse factor, not on-page exploit mechanics. The behavioural run showed a heavy burst of DOM rewriting after interaction and repeated front-end console errors. These indicate an unstable or hastily assembled page, but they are not evidence of exploitation on their own. The posture is a clearly high-risk one for any interaction that involves personal, medical or payment data. Evidence:

• Homepage: the title claims to be the official site of a city polyclinic, and the domain has no independently verifiable link to such an institution.
• Reputation: multiple security engines classify the domain as malicious or suspicious, and it also appears on an external blacklist.
• Provenance: the domain was registered in 2026 (about 0.37 years, roughly 136 days old). The web archive shows 114 snapshots, all captured on 2026-07-12 (1 year tracked), so there is no earlier history.
• Homepage behaviour: three sandbox runs completed with 8 console errors and a peak of 1,424 DOM mutations after interaction. No wallet, clipboard or external-credential-form abuse was detected.

Regulatory Verification Notes

Nothing was captured that substantiates the clinic's status. The page carries no verifiable healthcare licence or municipal or state registration, and no operator identity was independently confirmed. Page-level identity analysis was unavailable, so the on-page "official" claim cannot be treated as established. For a site presenting itself as a public medical facility, the lack of any verifiable institutional anchor matters more than for an ordinary commercial site. This is a verification gap that compounds the confirmed adverse listings. It is not a separate finding of wrongdoing. No third-party broker or regulatory-database record matched the domain. The transport encryption is valid, but it is a basic domain-validated certificate. It shows only that traffic is encrypted, not who operates the site. Evidence:

• Hosting: served from AS205431 (HostLab LLC, Kazakhstan, RIPE region), a data-centre and web-hosting network.
• Transport encryption: TLS certificate issued by YR2 (DV, domain validation only), valid to 2027-01-19.
• Registration: the domain is held through the registrar Spaceship, Inc., created 2026-06-12 and expiring 2027-06-12.
• Broker context: no match in the third-party broker-reputation dataset, so there is no external corroboration of an institutional identity.

What to Verify Next

Any claim of affiliation with a real polyclinic should be checked only through channels independent of this site. The clinic's name and number should be searched in the official health-authority or municipal registry of the relevant jurisdiction. The registry's published web address and telephone line should then be used to confirm whether 227gp.com is an authorised domain. Any appointment, patient-portal or insurance request that arrived through this site should be confirmed with the institution directly by phone or in person, using contact details taken from the official registry. Official support and contact channels should be confirmed the same way. Evidence:

• Homepage: the official-site claim has no verifiable registry reference to check against.
• Registration: the domain is only months old, so no long-standing institutional web presence can be cited to support the claim.
• Reputation: the active third-party threat listings should be rechecked with the listing sources before any decision is revisited.

Summary Verdict

The overall posture is elevated risk. Confirmed adverse reputation listings combine with a very young domain, an unverified institutional claim and no independent link to the organisation the page names. The modest technical hygiene seen does not offset this, and the evidence points to a site that should be treated as unsafe for sensitive interaction.

Infrastructure Integrity

The site is served from a single address at a commodity hosting provider. It has no CDN or WAF in front of it, so the origin server is directly exposed and no protective layer mitigates the reputational risk. The hosting address itself has no abuse-report history, which is a minor neutral point and does not change the overall assessment.

Closing Assessment

At most, the site should be viewed read-only. Logins, credentials, personal or medical data and payments should be withheld until the operator's identity is confirmed through an official registry and the threat listings are cleared.