Verdict
planosbradescosaude.com.br shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Marketing and lead-capture page for Bradesco Dental plans managed by Marazul Corretora de Seguros. Includes plan listings, FAQs, contact forms (name, phone, email, CNPJ option), corporate contact info and SUSEP registration number. Primary purpose is to collect leads and offer quotes for health and dental insurance products. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 15 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 3.8 years oldRegistered history | Clear |
| Web archive | Archived since 2013Public history exists | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2013.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This is a Brazilian insurance-brokerage and lead-generation website presenting Bradesco Dental and other health and dental plans through Marazul Corretora de Seguros. Its apparent business model is to collect prospective-customer details, provide quotations, and generate brokerage or insurer-sales opportunities rather than provide direct financial-account services.
Scam/Impersonation Risk
The site’s content presents as a conventional insurance-brokerage operation, with plan information, FAQs, corporate contact details, quotation forms, and no observed login, wallet, or payment-credential collection mechanism. However, this benign presentation is outweighed by a material external security contradiction: the domain is listed in blacklist intelligence, and multiple major security providers produced malicious detections. No distinct identity contradiction or confirmed brand-impersonation finding was observed, but the confirmed blacklisting and corroborating detections create a critical risk for sensitive interaction. The site should not be treated as trustworthy merely because its pages appear professionally constructed.
- The homepage is categorized as insurance lead generation and contains two forms for lead or callback requests; no login form or hidden form was observed.
- External reputation telemetry recorded 15 malicious and 2 suspicious detections from 22 evaluated results, with Fortinet, Kaspersky, and Sophos among the flagged providers.
- The domain was identified by both VT and an external blacklist source; Google Safe Browsing reported no malicious result, which does not offset the confirmed blacklist findings.
Regulatory Verification Notes
The site identifies Marazul Corretora de Seguros, presents corporate contact information, and displays a SUSEP registration number in its business-content pages. Those on-site claims are not independently verified by the supplied evidence, and the available identity assessment remains likely rather than verified. The displayed registration information should therefore be treated as a verification point, not as proof that the operator is authorized to arrange the advertised plans. The available broker-reputation context contains no matching record, but that is contextual only and is not a licensing or regulatory determination.
- The homepage and contact content identify “Marazul Corretora de Planos de Saúde” and display a SUSEP registration number.
- The domain was registered on 2022-11-16 and is reported as 3.76 years old.
- The site’s TLS certificate uses issuer WE1, DV validation, and is valid through 2026-10-07.
What to Verify Next
An institution considering engagement should confirm the displayed SUSEP registration directly with the relevant Brazilian registry and establish that the registered intermediary is authorized to market the named insurer’s plans. Contact details should be validated through an independently sourced corporate channel, and any quotation or data-submission process should be tested without providing unnecessary personal, credential, or payment information. Sensitive interaction should remain deferred until the external security detections have been resolved or satisfactorily explained.
- Interaction testing recorded 16 external XHR requests, including 2 non-whitelisted requests, and 12 external POST requests.
- The page exhibited a maximum post-interaction DOM difference of 5,350, warranting review of the data flows associated with quotation and callback forms.
- The site links to Instagram, Facebook, LinkedIn, and WhatsApp channels, which can be compared against independently sourced corporate contact details.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. Apparent commercial legitimacy in the page content does not overcome the confirmed external security contradictions, and the operator’s real-world identity and authorization remain insufficiently established for institutional reliance.
Infrastructure Integrity
The site is served through Cloudflare’s CDN and WAF infrastructure on AS13335, with observed addresses belonging to Cloudflare edge servers rather than an identifiable origin. This provides a meaningful layer of network protection and reduces direct origin exposure, but it is only a mitigating infrastructure characteristic and does not establish site legitimacy. The hosting provider is CLOUDFLARENET - Cloudflare, Inc., US; the observed edge IP was 172.67.223.148 on AS13335.
Closing Assessment
Access should be limited to non-sensitive, read-only review until independent registry, operator, contact-channel, and security-validation checks are complete; credential submission and financial transactions should be deferred.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 79/100 |
| Identity verification confidence | 78% |
- Trusted social count=3
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of planosbradescosaude.com.br.
- The request stayed on planosbradescosaude.com.br. It was not redirected to another domain. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2026-11-16. Noted
- The earliest public archive of this site is from 2013-09-28. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3034::6815:362b |
| Name servers | mcgrory.ns.cloudflare.com, teagan.ns.cloudflare.com |
| SSL issuer | WE1 |
| SSL expiry | 2026-10-07 |
| Domain age | 3.76 years (continuous registration) |
| Domain expiry | 2026-11-16 |
| Archive first seen | 2013-09-28 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 15 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about planosbradescosaude.com.br at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.