876fdd.icefactory.cl
Category: Malicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of 876fdd.icefactory.cl
This subdomain appears to host a single-purpose web page presented as an "Adobe Acrobat - Secure PDF Document" access screen. Based on the page title, screenshot, and the minimal structure observed, it does not appear to function as a general corporate website or a normal document-sharing portal. Instead, it seems designed to prompt visitors to enter an email address before continuing to a supposed PDF document.
The domain is a subdomain of icefactory.cl, but the specific host name "876fdd" looks randomly generated rather than branded or user-friendly. No clear operator identity, company details, or legitimate service information are visible in the scan data. The page’s branding and layout suggest it may be attempting to imitate a document-access workflow associated with a well-known PDF software brand rather than offering an independently identifiable service.
Safety Assessment for 876fdd.icefactory.cl
Multiple security signals indicate elevated risk at the time of this scan. The URL was flagged by 13 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The screenshot also shows a login-style form branded around Adobe Acrobat Reader that asks for an email address to access a "secure PDF document," which is a common pattern used in credential-harvesting campaigns.
Additional context supports a cautious assessment. The malware scan reported one flagged page with a generic suspicious verdict, and the domain's IP address is listed on one mail-reputation blocklist. While major content-malice databases referenced here did not report listings at the time of the scan, that does not outweigh the multi-engine phishing detections and the deceptive-looking page content.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt SSL certificate expiring in November 2026. A valid certificate helps encrypt traffic in transit, but it does not by itself indicate legitimacy. The server appears to run Apache and resolves to IP address 186.64.119.45, hosted by ZAM LTDA in Curicó, Chile.
The domain itself is several years old, which can sometimes lend credibility, but this is a subdomain and the suspicious activity may be limited to that host rather than the parent domain as a whole. DNSSEC status was not confirmed in the scan data, and the use of a random-looking subdomain combined with a branded credential prompt is a technical and behavioral concern.
Share your experience with this website. Was it safe? Did you encounter any issues?