ecocampingmunay[.]cl

Analysis as of July 22, 2026 indicates that the domain ecocampingmunay.cl is actively hosting a phishing page. The site was registered on August 02, 2024 through NIC Chile and resolves to the IP address 162.214.96.231, which is assigned to AS46606 Unified Layer and geolocated in the United States. The hosting infrastructure uses Apache HTTP Server with PHP and MySQL, and the front‑end is built on WordPress and jQuery, with Google Analytics scripts present. The TLS certificate is issued by Let’s Encrypt (YR2), and the HTTP response returns status code 200. The page title served by the web server reads “Ecocamping Puntilla Munay | Un lugar encantador en el Río Limarí”, confirming the content is presented in Spanish and references a local tourism site, which is typical for credential‑harvesting campaigns targeting Spanish‑speaking users.

Threat intelligence reports corroborate the malicious classification. AlienVault OTX lists the domain in five separate pulses, and VirusTotal records five detections out of ninety‑one scanned security vendors. The domain appears on one public blocklist and is currently blocked by the PhishDestroy service, indicating that at least one third‑party anti‑phishing platform has taken mitigation action. The authoritative name servers are ns1.huevohost.cl, ns2.huevohost.cl, nsa.huevohost.com, and nsa1.huevohost.com, all of which resolve to the same IP address, suggesting a single‑point hosting arrangement.

While the observable indicators confirm active phishing activity, the specific payload, target credentials, and victim interaction flow have not been publicly disclosed. Consequently, defenders should treat the domain as high‑risk. Recommended mitigations include adding the domain and its resolved IP address to network deny lists, updating web‑proxy and DNS filtering rules, and monitoring for similar WordPress‑based deployments that reference the same name‑server set.