Analysis of the domain 1818.cl indicates a high‑risk, active phishing infrastructure. The domain was registered on March 09, 2026 through NIC Chile and currently resolves to the IPv4 address 108.167.149.250. Authority for the zone is provided by four nameservers: ns1.nuevascabezas.cl, ns2.nuevascabezas.cl, ns10.prodns.cl, and ns11.prodns.cl. Google Safe Browsing classifies the site as a social engineering threat, and commercial blocklists have already listed the domain, with PhishDestroy confirming it as blocked.
VirusTotal scans show that 11 of 91 security vendors flagged the domain, reinforcing the suspicion of malicious activity. The domain appears on one additional security blocklist, further evidencing its malicious reputation. No public page title or content analysis is available, so the specific lure or credential‑stealing technique remains unconfirmed.
Defenders should treat 1818.cl as hostile: network perimeter controls should deny outbound or inbound traffic to 108.167.149.250, DNS filtering solutions should block the domain and its associated nameservers, and endpoint security products should enforce the Google Safe Browsing warning. Continuous monitoring of the IP and any related subdomains is advised, as the infrastructure may expand or shift hosting. Given the high risk rating and the combination of registrar data, blocklist presence, and multiple vendor detections, the domain should be considered unsafe and proactively mitigated.