Is oralcamp.com.br a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as OralCamp, a local dental clinic serving Campinas and Sumaré, with information about dental procedures, clinic locations, telephone and messaging contact channels, and appointment-booking calls to action. Its apparent business model is the provision of fee-based clinical dental services rather than financial, investment, or cryptocurrency activity.

Scam/Impersonation Risk

The site content is internally coherent with a dental-clinic presentation: the homepage describes dental services, identifies local operating locations, and does not expose a login form, credential-collection workflow, wallet connection, or other obvious phishing mechanism. However, this benign page profile is materially contradicted by confirmed blacklist status and multiple external malicious detections, including detections from several established security providers. The available evidence does not establish a brand-impersonation or conflicting-legal-identity finding, but the external threat evidence is sufficiently serious that the website should be treated as unsuitable for credentials, personal or medical information, or payment activity pending independent resolution. Evidence:

• The homepage is categorized as a dental clinic and contains no login form, hidden sensitive form, or untrusted form destination.
• External reputation telemetry records 14 malicious detections, with 0 suspicious detections, and a confirmed blacklist result from 2 external sources.
• The site's transport endpoint returned HTTP 200 successfully in 2 of 2 observed runs, but stable page delivery does not offset the external malicious detections.

Regulatory Verification Notes

The website's stated clinic purpose is clear, but the available material does not independently verify the real-world operator or establish licensing. No license authority or license number is claimed in the reviewed business information, making professional registration and clinic authorization verification necessary before any clinical engagement. The domain itself is long-established, while historical coverage indicates continuity across several years; these are provenance indicators, not proof that the current operator is authorized. Transport security is present, but a domain-validated certificate confirms encryption rather than legal identity or regulatory standing. Evidence:

• Domain registration telemetry records creation on 2011-06-01 and an age of 15.23 years, with expiry on 2028-06-01.
• Historical telemetry records 151 archive snapshots across 8 tracked years, first seen on 2017-06-26 and last seen on 2024-12-29.
• Hosting telemetry identifies AS51167, CONTABO - Contabo GmbH, DE.
• TLS telemetry identifies issuer YR1, validation level DV, valid to 2026-10-11T17:59:04+00:00.

What to Verify Next

Before booking, disclosing medical information, or making a payment, the clinic and treating professionals should be confirmed through the applicable professional and business registries using contact details obtained independently of the website. The published locations should be checked through an independent map, healthcare directory, or offline contact route, and any payment request should be matched to a verified clinic account rather than an individual or unrelated intermediary. The domain's current blacklist status should also be rechecked by the responsible security or fraud team before access to any patient-facing workflow is permitted. Evidence:

• The homepage provides two stated locations, Campinas and Sumaré, creating concrete details for independent verification.
• The site uses appointment-booking calls to action but exposes no sensitive form in the observed page.
• The content analysis found no crypto, wallet, or financial-investment functionality, so any later request for such activity would be inconsistent with the stated business purpose.

Summary Verdict

The overall posture is critical trust risk. Although the site presents a plausible local-clinic profile and its identity has not been independently verified, the confirmed external threat findings override the otherwise coherent content and technical stability. Sensitive interaction should not be approved on the basis of the website alone.

Infrastructure Integrity

Cloudflare CDN/WAF protection is present and is a mitigating control against direct exposure of the underlying service. The observed edge address was 169.58.6.92 on AS51167; no origin candidate was identified during this analysis. This infrastructure arrangement may improve delivery resilience, but it does not validate the operator or neutralize the external threat findings.

Closing Assessment

Access should remain limited to passive review until independent clinic, practitioner, payment, and domain-reputation checks are completed; credentials, personal or medical information, and payments should not be submitted in the interim.