actualizar-entrar[.]iceiy[.]com

PhishDestroy identifies actualizar-entrar.iceiy.com as a live generic phishing domain operated to steal user credentials under the guise of a software update portal. Victims are lured via email or social media links prompting an urgent “update now” action, which redirects to a convincing fake login page mimicking legitimate services. Once credentials are entered, they are harvested by attackers for subsequent account takeovers, credential stuffing, or sold on underground forums. This domain was flagged on December 6, 2020 and is registered through Porkbun LLC using a ZeroSSL certificate on IP 185.27.134.128. As of the latest scan, VirusTotal shows 0 detections out of 95 engines, indicating it remains largely undetected by antivirus platforms. Despite its low detection rate, the domain’s recent active status and misleading naming pattern (Spanish for “update-enter”) strongly suggest ongoing malicious activity targeting Spanish-speaking users or systems. If you visited actualizar-entrar.iceiy.com, immediately change any passwords entered there, enable multi-factor authentication on related accounts, and scan your device with updated antivirus software. Report the domain to your IT/security team and avoid clicking links in unsolicited messages. Monitor financial and email accounts for suspicious activity for at least 30 days. Block the domain at the network level if possible to prevent further access.