WEBSITE ANALYSIS REPORT

https://i.gal/ShKyN

16 Sep 2026 · 06:53:08.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:52:39.583 GET 301 document 0 B 580 ms 1 alerts

06:52:40.173 GET 200 document 859 B 106 ms 3 alerts

06:52:40.501 GET 200 script 0 B 0 ms 3 alerts

06:52:40.584 GET 200 document 7.9 KB 42 ms 3 alerts

06:52:40.652 GET 404 img 11.6 KB 32 ms 3 alerts

06:52:45.690 GET 200 document 27.0 KB 78 ms 3 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://autenticartcuent2pasos.iceiy.com/index1.html

IP / ASN

185.27.134.166

AS34119 · Wildcard UK Limited

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with CRLF line terminators
MIME type: text/html; charset=UTF-8
First seen (UTC): 16 Sep 2026 · 06:53:13.261 UTC
Last seen (UTC): 17 Sep 2026 · 03:01:16.940 UTC
Times seen: 4

Size: 27.0 KB (27608 bytes)
MD5: e8ac0dbee11b6bee4b1eaebe71ede2ee
SHA1: 08c968dce609a2a835ad5d6af198c79c8a69a505
SHA256: 49fc04994cd0dc8f4753bdead379fb7c7cc4592504e2ece0743b82e41dcf419f

Certificate information

Issuer: ZeroSSL GmbH · ZeroSSL ECC DV SSL CA 2
Subject: iceiy.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 74:50:61:E8:B8:65:18:ED:19:F2:CB:BC:BE:E3:92:00:A1:F0:CF:DE
Valid from: Thu, 03 Sep 2026 00:00:00 GMT
Valid until: Wed, 02 Dec 2026 23:59:59 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)
Google Hosted Libraries (CDN)
jQuery:3.5.1 (JavaScript libraries)
OpenResty (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /index1.html HTTP/1.1
Host: autenticartcuent2pasos.iceiy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://autenticartcuent2pasos.iceiy.com/?i=1
Cookie: __test=b84d657c12586e88111d78cf40f8fcb7
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 16 Sep 2026 06:52:44 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 27608
Connection: keep-alive
Last-Modified: Fri, 11 Sep 2026 21:15:32 GMT
ETag: "6bd8-65b3b95a655ae"
Cache-Control: max-age=2592000, public, proxy-revalidate
Expires: Fri, 16 Oct 2026 06:52:44 GMT
Accept-Ranges: bytes

06:52:46.012 GET 200 script 87.4 KB 92 ms —

06:52:46.015 GET 200 script 79 B 32 ms 3 alerts

06:52:46.134 GET 200 script 87.4 KB 23 ms —

06:52:46.208 GET 404 img 0 B 0 ms —

https://i.gal/ShKyN

Domain graph

Hostnames

Connections