istadentalclinic[.]com

Analysis of www.istadentalclinic.com indicates a confirmed phishing site targeting users seeking dental services. The domain, registered on May 5, 2022, through a major registrar, currently resolves to IP address 94.73.147.32. The page title, 'Главная - Istadental,' suggests a focus on Russian-speaking users, though the site may serve broader audiences. Two independent security blocklists, including PhishDestroy and BLP-Malware, have flagged this domain, reinforcing its classification as high-risk. Additionally, the domain appears in two AlienVault OTX threat intelligence pulses, further corroborating its malicious nature. Technical indicators reveal limited but consistent detection. VirusTotal reports that 2 out of 95 security vendors have flagged the domain, a modest but notable signal given the low baseline detection rate for newer or evasive phishing sites. The SSL certificate, issued by Sectigo Limited, does not mitigate the risk, as phishing sites frequently use valid certificates to appear legitimate. The domain's trust score of 0/100 from Gridinsoft aligns with its presence on multiple blocklists, indicating a lack of reputable activity or associations. Defenders should prioritize this domain for immediate blocking at the network and endpoint levels. The infrastructure, while not tied to known phishing kits or advanced threat actors, remains active and capable of harvesting credentials or distributing malicious payloads. Organizations should monitor for related domains registered through the same registrar or resolving to the same IP range, as these may represent additional attack vectors. Given the domain's age and persistent activity, it is unlikely to be a short-lived campaign, warranting sustained vigilance.