39df72[.]icefactory[.]cl

39df72.icefactory.cl is a subdomain of icefactory.cl. PhishDestroy first observed the hostname on Aug 22, 2026. The captured page title is “406 Not Acceptable”. Current evidence score: 100/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 19 detections among 91 engines: alphaMountain.ai, BitDefender, CRDF, CyRadar, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Aug 23, 2026 at 02:02 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 23, 2026 at 02:20 UTC. Google Safe Browsing returned no flag on Aug 23, 2026 at 02:02 UTC. URLScan completed without a malicious verdict (score 0) on Aug 22, 2026 at 17:08 UTC.

HTTP 302 was recorded on Aug 23, 2026 at 01:21 UTC. At collection time, the hostname resolved to 186.64.119.45 on AS52368 (ZAM LTDA.). The recorded endpoint location is Curicó, CL. The stored server header is Apache. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt / YR2 as the certificate issuer with validity through Nov 8, 2026; checked Aug 22, 2026 at 13:02 UTC.

The content indicators and 2 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.