elilien[.]cl

This domain is flagged as a generic phishing threat with a high risk level and remains active as of July 12, 2026. The domain resolves to IP address 66.6.44.4, located in the United States and assigned to TUMBLR, INC., but it is not confirmed that Tumblr operates or hosts this specific domain. The page title is 'Elilien'. The domain is registered through NIC Chile and was created on August 2, 2012, which makes it over a decade old; however, its current use is malicious. Infrastructure analysis shows the domain uses nameservers ns1.afraid.org through ns4.afraid.org, indicating reliance on a free DNS hosting service often abused by threat actors. The domain employs Let's Encrypt SSL (R12) for HTTPS. The HTTP status code is 403, suggesting the server blocks direct access or presents a restricted page. The Gridinsoft trust score is 0 out of 100. VirusTotal reports 3 out of 91 security vendors flagging the domain, and it appears on three security blocklists including PhishDestroy, MetaMask, and SEAL. Detected technologies include WordPress, Tumblr, MySQL, PHP, Nginx, jQuery, HSTS, and Google Publisher Tag, but without direct site access, it is uncertain which of these are actively used for the phishing operation. Defenders should block all traffic to elilien.cl and its IP 66.6.44.4. Users who have visited this domain should scan their systems and change any credentials entered there. The domain remains active and requires monitoring for changes in hosting or content.