intranetmelipilla[.]cl

This domain, intranetmelipilla.cl, is identified as a credential harvesting phishing site targeting employees or affiliates of the Municipalidad de Melipilla. The page impersonates the official municipal IT portal, presenting a login interface under the title 'Bienvenido - Informática Municipalidad de Melipilla' to deceive users into disclosing authentication credentials. Analysis indicates the campaign is designed to exploit trust in local government digital services, a tactic commonly observed in targeted phishing operations. Infrastructure analysis reveals the domain was registered through NIC Chile on February 23, 2026, an anomalous creation date suggesting potential domain spoofing or backdating. The domain resolves to the IP address 131.108.210.182, located within AS26623 (TECNOLOGIACHILE.COM LTDA) in Chile. Security telemetry shows the domain is flagged by 22 of 95 vendors on a major detection platform, with one active security blocklist reference. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites due to its accessibility and short validation window. The domain is currently offline, though the underlying infrastructure remains potentially active. Organizations are advised to block the domain and associated IP at perimeter security controls, including firewalls and email gateways. Network defenders should monitor for residual connections to 131.108.210.182 and review logs for prior access attempts. Users who may have interacted with the site should reset credentials through official municipal channels and enable multi-factor authentication where available. Domain registrars and hosting providers are encouraged to review the registration for compliance with abuse policies.