Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 21 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
i[.]gal
“i.gal”
साक्ष्य सारांश
Analysis of i.gal (registered 14 Oct 2016) shows the domain is actively serving web content (HTTP 200) and is secured with a valid Let's Encrypt certificate (R13). The site resolves to 82.98.168.24, an address owned by Dinahosting S.L in Spain. The hosting provider’s name servers (ns.dinahosting.com, ns.gestiondecuenta.com, ns2.dinahosting.com, ns2.gestiondecuenta.com) confirm the infrastructure belongs to the same provider. The page title returned by the server is simply “i.gal”, and no additional content has been disclosed in the current intelligence set. The web stack is identified as Apache HTTP Server delivering a front‑end built with Bootstrap, AngularJS and jQuery, which are common components in many phishing kits.
The domain appears on a single public blocklist, PhishDestroy, indicating that at least one anti‑phishing service has flagged it. Further corroboration comes from AlienVault OTX, where the address is referenced in 50 separate threat pulses, suggesting repeated observation by the community. VirusTotal scans show 10 of 91 antivirus engines flag the domain, reinforcing the suspicion of malicious activity. An MX record (mail.i.gal, priority 10) is present, which could be used for credential harvesting or spam distribution, though no mail traffic has been publicly observed. The registrar listed as Asociación PuntoGal provides limited transparency, and no brand or specific scam type is disclosed in the available data.
Consequently, the primary uncertainty lies in the exact payload delivered to victims; without a content snapshot, the precise phishing vector cannot be confirmed. Defenders should block i.gal at the network perimeter, add it to local deny lists, and monitor DNS queries for the domain and its associated IP. Email security gateways should treat any messages from mail.i.gal as suspicious, and users should be warned that any login prompt originating from this domain is likely fraudulent.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260720-A02155- कैप्चर किए गए पेज का शीर्षक
- Correo
कानूनी आधार
प्रमाण का पूरा पाठ
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (ES):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and ES's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | habilitar-email365.hstn.me |
phishing | Phishing Block |
| DNS4EU | habilitar-email365.hstn.me |
malicious | Sinkholed |
| Hagezi Threat Feed | i.gal |
malicious | Sinkholed |
| DNS4EU | i.gal |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 10/08/2026
पहचान समयरेखा
-
VirusTotal
9 → 10
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें
4 उच्च-विश्वसनीयता वाली तकनीकें पहचानी गईं
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of i.gal · checked Jul 21, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।