Verdict
andromed.com.pe shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Website for Clínica Andromed — a medical clinic in San Borja offering various specialties, emergency contact, operating hours, contact emails/phones, and appointment booking. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 9 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 20 years oldRegistered history | Clear |
| Web archive | Archived since 2006Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2006.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
andromed.com.pe presents itself as the website of Clínica Andromed, a local medical clinic in San Borja offering general and specialist healthcare services, emergency contact information, operating hours, and appointment booking for prospective patients.
Scam/Impersonation Risk
The site’s visible content is consistent with a medical-clinic business and its appointment form does not present a login or credential-collection flow. However, this benign presentation is materially contradicted by confirmed external threat detections and blacklist status, which create a significant risk for sensitive interaction. The observed behavior also included suspicious inline scripts and repeated console errors, although no page-level brand impersonation, hidden form, wallet-drainer, or phishing behavior was identified. The available evidence therefore supports a cautionary conclusion: the website should not be treated as safe for credential, personal-information, or payment activity solely because its pages appear professionally structured.
- External reputation assessment recorded 9 malicious detections and 3 suspicious detections among 17 evaluated results; the domain was also recorded as blacklisted.
- The homepage contained 2 suspicious inline scripts and 8 console errors during behavioral testing.
- The homepage exposed one appointment-booking form, with no login form, hidden form, or externally submitted password form detected.
- Domain registration continuity is 20.39 years; the first recorded historical date is 2006-03-28.
Regulatory Verification Notes
The website describes medical services and appointment booking but does not state a license authority or license number in the supplied content. This is a regulatory-disclosure gap requiring independent confirmation, not by itself proof of wrongdoing. The registration record identifies NIC.PE as registrar and Franklin Gutierrez as the registrant, but that record does not independently verify that person’s relationship to Clínica Andromed. The technical transport controls are present, but a domain-validated certificate confirms control of the domain rather than the legal identity or regulatory standing of the operator.
- The site's clinic and contact content contains no disclosed licensing authority or license number.
- Registration record: registrar NIC.PE; registrant Franklin Gutierrez.
- Confirmed hosting telemetry: AS15169, Google LLC; country US.
- TLS certificate: issuer YR2, DV validation, valid to 2026-10-16 21:45:01 UTC.
What to Verify Next
Before any appointment, submission of personal or medical information, or payment, the operator’s legal identity should be confirmed through the relevant Peruvian healthcare and business registries, using details obtained independently of the website. The clinic’s published contact channels should be cross-checked through an offline or independently sourced route, and any appointment or payment process should be confirmed directly with the physical clinic. Browser and endpoint security controls should also be used to inspect the site before proceeding with sensitive interactions.
- The `/nosotros` and `/contactos` pages provide the primary identity and contact claims that require registry and independent-channel confirmation.
- The `/agendar` page is the designated appointment workflow and should be validated before submitting information.
- The site's transport encryption is domain-validated rather than organization-validated, so it cannot substitute for operator verification.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. Apparent clinic content and a long registration continuity do not overcome the confirmed external threat and blacklist evidence. Identity remains unverified, so the website should not be regarded as an established or independently authenticated healthcare operator.
Infrastructure Integrity
The site resolves to Google Cloud infrastructure on AS15169, with no CDN, edge IP, or origin candidate identified in the supplied infrastructure analysis. Google Cloud hosting is a neutral-to-mitigating infrastructure characteristic, not evidence that the site or its operator is legitimate, and it does not offset the external reputation findings.
Closing Assessment
Restrict activity to passive viewing until the operator, regulatory standing, contact channels, and any proposed information or payment exchange have been independently confirmed; credentials, medical details, and payment information should not be submitted in the interim.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page carried inline scripts written in a style TrustSniffer treats as suspicious.Behaviour in a sandbox
rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of andromed.com.pe.
- The request stayed on andromed.com.pe. It was not redirected to another domain. Clear
- Registration is published under NIC.PE. Clear
- DNS for this domain is served by siteground.net, across 2 name servers. Noted
- The earliest public archive of this site is from 2006-03-28. Clear
- It is hosted on GOOGLE, from a server in US. Noted
Domain intelligence
| Registrar | NIC.PE |
|---|---|
| Hosting | GOOGLE - Google LLC, US |
| Country | US |
| Server IP | 35.215.117.162 |
| Name servers | ns1.siteground.net, ns2.siteground.net |
| SSL issuer | YR2 |
| SSL expiry | 2026-10-16 |
| Domain age | 20.39 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2006-03-28 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 9 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about andromed.com.pe at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.