chimeramp[.]st

The domain chimeramp.st is identified as a credential harvesting phishing site targeting user login credentials. Analysis confirms its current status as offline, though it remains a documented threat in security databases. No legitimate brand impersonation has been conclusively linked to this domain, but its infrastructure aligns with common phishing tactics. Technical indicators reveal the domain was flagged by 3 of 95 security vendors on VirusTotal, registered through NETIM, and resolves to the IP address 188.114.97.3. Created on April 29, 2025, it appears on one security blocklist and lacks an SSL certificate, a red flag for secure communication. Additionally, it is referenced in three AlienVault OTX threat intelligence pulses, further corroborating its malicious classification. The page title, 'Sing in,' contains a typographical error, a frequent tactic in phishing to mimic legitimate login portals. As of the latest verification, chimeramp.st is offline, but its historical activity warrants caution. Organizations and individuals are advised to block the domain and its associated IP at the network level. Security teams should monitor for related indicators of compromise, including the IP 188.114.97.3, and update detection rules to account for similar phishing infrastructure. End-users should be educated on recognizing typographical errors in domain names and login prompts as potential phishing indicators.