chemservice[.]to

Analysis of the domain chemservice.to, created on 10 Oct 2025 and hosted behind Cloudflare (AS13335, NL), shows it is currently active and resolves to IP 91.206.71.33. The site returns HTTP 200 and presents a valid SSL certificate issued by Google Trust Services (WE1). The only visible page title is the Russian phrase “Вы не робот?” which translates to “You are not a robot?”. No additional page content has been published in public feeds, so the exact phishing lure remains unconfirmed. Threat intelligence indicates the domain is associated with a generic phishing campaign.

It appears on one security blocklist and is specifically blocked by PhishDestroy. AlienVault OTX references a single pulse that tags the domain as malicious. On VirusTotal, 11 of 95 scanning engines have flagged the domain, reinforcing the suspicion. The registrar listed is NiceNIC International Group Co., Limited, and the nameservers are cody.ns.cloudflare.com and jamie.ns.cloudflare.com.

Gridinsoft’s trust score is 0 / 100, reflecting a lack of reputation. Given the combination of active hosting, a valid TLS certificate, a non‑human‑verification page title, and multiple independent detections, defenders should treat chemservice.to as high‑risk. Recommended actions include adding the domain to DNS and URL filtering blocks, monitoring outbound connections for attempts to reach the IP address, and updating intrusion‑detection signatures to capture the observed indicators. Continuous re‑evaluation is advised because the underlying phishing page content has not been publicly disclosed, and further malicious payloads could be deployed behind the current infrastructure.