ozanguner[.]eu

This domain, www.ozanguner.eu, is actively flagged as a high-risk phishing site targeting individuals seeking dental services. Analysis indicates the site impersonates a legitimate dental clinic under the name 'Dt Ozan Guner - Dental Clinic Turkey,' a tactic commonly used to harvest personal and financial information from victims. The domain currently resolves to IP address 38.242.156.42, hosted on AS51167 (Contabo GmbH) in France. A 301 HTTP redirect is present, which may be used to funnel users to a secondary malicious endpoint or to obscure tracking of the phishing infrastructure. Infrastructure review reveals the domain uses a Let's Encrypt SSL certificate (R13), a common choice among threat actors due to its free and automated issuance process. The absence of configured nameservers (NS_NOT_FOUND) is unusual for legitimate sites and suggests either misconfiguration or deliberate obfuscation of hosting details. The domain appears on one security blocklist and is flagged by one of 95 vendors on VirusTotal, indicating limited but confirmed detection. Gridinsoft assigns a trust score of 0/100, reinforcing the assessment of malicious intent. The phishing campaign remains active as of July 12, 2026. Defenders should prioritize blocking the domain and its associated IP address at the network level. Organizations are advised to monitor for user interactions with this domain, particularly in sectors related to healthcare or travel, where such scams are frequently targeted. While the exact phishing kit or payload is not confirmed in available data, the use of a dental clinic pretext aligns with known social engineering tactics. Further investigation into the redirect chain and any linked infrastructure is recommended to identify additional compromised assets.