ttcglobchess[.]com

Analysis of ttcglobchess.com indicates the domain is actively used in a generic phishing campaign. The site returns an HTTP 302 redirect, which is commonly employed to forward victims to malicious destinations. The page title observed is “title test - Global Chemical Supplier”, suggesting an attempt to impersonate a chemical supplier, although the content of the page has not been examined. The domain was registered on June 16, 2026 through Namecheap Inc. and is hosted on IP 194.36.191.196, located in the Netherlands and associated with AS60117 (Host Sailor Ltd). The DNS configuration uses nameservers ns5.nl.hostsailor.com and ns6.nl.hostsailor.com, both belonging to the same hosting provider. The SSL certificate is issued by Let’s Encrypt, providing encrypted transport but offering no indication of legitimacy. Reputation checks show a Gridinsoft trust score of 0 out of 100 and a single detection by VirusTotal out of 91 security vendors, indicating at least one vendor flagged the domain as malicious. The domain is listed on a security blocklist and is currently blocked by PhishDestroy. Despite these indicators, the domain remains active as of the reporting date. Uncertainty remains regarding the exact payload delivered after the redirect and whether any credential harvesting forms are present, as no direct page content has been captured. Defenders should consider adding the domain and its associated IP address to blocklists, monitor DNS queries for the listed nameservers, and enforce TLS inspection to detect the redirect behavior. Continuous monitoring of threat intelligence feeds for additional detections is recommended.