chikyr[.]weebly[.]com

This domain, chikyr.weebly.com, is identified as a credential theft phishing site designed to harvest user login credentials through deceptive prompts. The page title, 'Home,' suggests an attempt to mimic legitimate landing pages, though no specific brand impersonation was confirmed in initial analysis. The infrastructure lacks overt ties to known crypto drainer kits or financial malware, focusing instead on traditional credential acquisition methods. Infrastructure analysis reveals the domain was registered through MarkMonitor, Inc. on June 15, 2026, and resolves to the IP address 74.115.51.8. Detection metrics indicate elevated risk, with 18 out of 95 security engines flagging the domain on VirusTotal. The domain appears on one security blocklist and was blocked by at least one threat intelligence feed. The SSL certificate, issued by Let's Encrypt (serial number YE1), provides encrypted communication but does not mitigate the underlying phishing threat. As of the latest assessment, the domain has been taken offline, likely in response to detection and reporting. However, residual risk persists due to the potential for infrastructure reuse or migration to newly registered domains. Organizations are advised to monitor for related indicators, including the resolving IP and registrar patterns, and to implement real-time URL filtering to prevent user exposure to similar threats. End-users should verify domain authenticity before entering credentials and report suspicious activity to security teams.