lopradodeportes[.]cl

This domain, lopradodeportes.cl, is flagged as an active phishing site targeting users through a deceptive document access portal. Analysis of the page title, 'Document Viewing Error,' suggests an attempt to mimic legitimate file-sharing or document management services, likely aiming to harvest credentials or distribute malicious payloads. The domain was registered on May 25, 2021, through NIC Chile and remains operational as of July 12, 2026, resolving to the IP address 162.241.88.209, hosted under AS19871 (Network Solutions, LLC) in the United States. Infrastructure analysis reveals the domain uses nameservers ns1.probit.cl and ns2.probit.cl, which may indicate a pattern of hosting phishing or low-reputation domains. The SSL certificate, issued by Let's Encrypt (YR1), is valid but does not mitigate the malicious intent of the site. Security vendors on VirusTotal have flagged this domain, with 6 out of 95 engines detecting it as malicious. Additionally, the domain appears on one security blocklist and has been identified in a single threat intelligence pulse on AlienVault OTX, further corroborating its classification as a phishing threat. The exact target or impersonated brand remains uncertain due to the generic nature of the page title and lack of visible branding. However, the 'Document Viewing Error' message is a common tactic to create urgency, tricking users into interacting with malicious elements. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or network level. Monitoring for similar naming conventions or shared infrastructure, such as the nameservers or hosting provider, may help identify related threats. Organizations should also review logs for any connections to 162.241.88.209 or domains using the same nameservers to assess potential exposure.