ch-prlme[.]com

This domain, ch-prlme.com, is identified as a credential phishing site specifically designed to mimic Plesk web hosting control panel interfaces. Analysis of the page title 'MezoPlesk' indicates an attempt to deceive users into entering login credentials, likely targeting system administrators or hosting clients. The infrastructure appears crafted to harvest authentication details through fraudulent login portals, posing a direct risk to organizational and individual account security. Infrastructure analysis reveals multiple indicators of malicious activity. The domain was registered on February 28, 2026, through Global Domain Group LLC, a registrar frequently associated with abusive registrations. It resolves to IP address 158.94.209.90, hosted on AS202412 (Omegatech LTD) in the Netherlands, a network segment with a history of hosting phishing infrastructure. VirusTotal reports 20 out of 95 security vendors flagging the domain as malicious, while the domain appears on at least one security blocklist. Notably, the site lacks an SSL certificate, further reducing its legitimacy and increasing detection likelihood. Users who accessed ch-prlme.com should immediately revoke any credentials entered on the site, particularly those associated with hosting, email, or administrative accounts. System administrators should check logs for connections to 158.94.209.90 or ch-prlme.com between the domain's registration and takedown. Affected devices should undergo malware scans to rule out secondary payloads. Organizations are advised to implement additional authentication factors and monitor for unauthorized access attempts using harvested credentials. Domain registrars and hosting providers are encouraged to review associated infrastructure for similar abuse patterns.