anadmedicalcentr[.]org

The domain anadmedicalcentr.org was registered through Dynadot LLC on May 26, 2025 and is currently taken offline. It resolves to the IPv4 address 198.23.193.170, which belongs to the HostPapa hosting network under ASN 36352 in the United States. The site served an SSL certificate issued by Let’s Encrypt (R13), indicating that HTTPS was available at the time of observation. Nameserver records point to dns1.geebytesdns.com and dns2.geebytesdns.com, both associated with the same hosting provider. The page title retrieved during the brief live scan read "Anadolu Medical Center – Kocaeli, Turkey," suggesting the domain was used to impersonate a legitimate medical institution located in Turkey.

Reputation services flag the domain as extremely low trust: Scamadviser assigns a score of 1 out of 100 and Gridinsoft reports a score of 0 out of 100. The domain appears on a single security blocklist and is listed in one AlienVault OTX pulse, indicating limited but confirmed detection in threat‑intel feeds. VirusTotal analysis shows that six of ninety‑five scanning engines flagged the domain, providing additional corroboration of malicious intent. PhishDestroy has also blocked the domain, reinforcing its classification as a phishing vector.

Given the combination of a low trust score, confirmed detections, and the use of a reputable medical centre’s name in the page title, analysts assess the domain as an elevated‑risk generic phishing threat. Defenders should add the domain and its resolved IP address to network deny lists, monitor DNS queries for the associated nameservers, and employ URL filtering to prevent user access. Continuous observation of the hosting provider’s IP range is advised, as the infrastructure may be reused for future campaigns. Until the site is permanently removed, security teams should treat any traffic to anadmedicalcentr.org as malicious and investigate related logs for potential compromise attempts.