chancemed[.]org

Analysis as of July 22 2026 indicates that the domain www.chancemed.org is currently active and resolves to the IP address 185.215.4.22, which is registered to a Russian hosting provider identified as Tilda Publishing LLC. The domain was registered through GoDaddy.com, LLC on June 07 2022 and uses the nameservers ns63.domaincontrol.com and ns64.domaincontrol.com. TLS termination is provided by a Let’s Encrypt certificate (YR1), and HTTP requests return a 301 redirect, suggesting that the site is intentionally forwarding visitors to a target page. The page title observed in the HTTP response is “Лечение в Израиле | Медицинский центр Chance — Онкология, Нейрохирургия, Кардиология”, indicating that the site claims to represent a medical centre named Chance. The front‑end stack includes the Tilda website builder together with Yandex.Metrika, jQuery, Hammer.js, Google Tag Manager, Google Analytics, Facebook Pixel and DDoS‑Guard, all of which are typical of public‑facing marketing sites.

The domain appears on one security blocklist and has been flagged by the PhishDestroy service, confirming that it is being monitored as a phishing‑related resource. VirusTotal records show that 91 scanning engines have examined the domain and reported no detections, but the absence of a positive detection does not constitute a safety guarantee. No additional intelligence such as Safe Browsing, OTX, or other reputation services is provided in the current dataset.

Defenders should consider the domain as a potential phishing vector targeting users seeking medical services, especially Russian‑speaking audiences, and should block or monitor traffic to the IP address and domain. Ongoing observation of the redirect behavior, any credential‑collection forms, and the evolution of the blocklist status is recommended. Incident response teams should treat any emails or messages that reference the Chance medical centre as suspicious until further verification.