# PhishDestroy domain threat record: glimmervault-horizon.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/glimmervault-horizon.com/
Machine-readable companion: https://phishdestroy.io/domain/glimmervault-horizon.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-27 21:19:21 UTC
- Last availability or vendor check: 2026-10-27 23:00:27 UTC
- Stored record updated: 2026-10-28 00:57:09 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 172.67.207.147
- Registrar in stored WHOIS data: Porkbun LLC
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2025-11-18 07:54:46 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/019ddd59-9953-7591-9c3d-66c770eeac59/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/glimmervault-horizon.com
- Certificate Transparency search: https://crt.sh/?q=%25.glimmervault-horizon.com
- Web Archive lookup: https://web.archive.org/web/*/https://glimmervault-horizon.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added glimmervault-horizon.com to its internal blocklist on 2026-10-27 and classified it as a suspicious domain. A fetch on that date returned HTTP 403 and no page title was recorded.

How the scam works
The vendor detections label the site as phishing or malware‑related, which typically indicates attempts to harvest credentials or deliver malicious payloads. No specific malicious content was observed in the captured page snapshot.

Evidence
VirusTotal scanned the domain on 2026-10-22 and reported 16 detections from 92 engines, including 14 malicious and 2 suspicious labels from vendors such as BitDefender, ESET and Fortinet. Google Safe Browsing checked on 2026-10-27 and returned no flag. Cloudflare Radar on 2026-10-27 marked the domain as phishing and malware. URLScan captured a page on 2026-04-30; its engine score was 81 and it was flagged as malicious, while the overall verdict was clean. OTX listed one pulse on 2026-10-27. PhishDestroy’s internal blocklist contains the domain, and external blocklists showed no entries at the time of checking.

Infrastructure
The domain was registered with Porkbun LLC on 2025-11-18 and expires on 2026-11-18. DNS records observed on 2026-10-22 listed A records 172.67.207.147 and 104.21.22.232 and AAAA records 2606:4700:3032::6815:16e8 and 2606:4700:3031::ac43:cf93. The site uses Cloudflare’s network (recorded IP 172.67.207.147, country CA) and presents a TLS certificate issued by Google Trust Services, valid from 2026-09-11 to 2026-12-10; DNSSEC is not enabled.

What to do
Avoid entering any credentials or downloading files from the site. If login information was submitted, change the associated passwords immediately and run a current anti‑malware scan. Defenders should block the exact domain in web filters and monitor outbound traffic for connections to its recorded IP addresses.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019ddd59-9953-7591-9c3d-66c770eeac59/
Cloudflare Radar report: https://radar.cloudflare.com/scan/9d32098c-ee0d-4cc2-860f-70d670eb1174
Stored capture screenshot: https://urlscan.io/screenshots/019ddd59-9953-7591-9c3d-66c770eeac59.png
Cloudflare Radar screenshot (2026-10-27T21:42:36Z): https://screenshots.phishdestroy.io/cf/9d32098c-ee0d-4cc2-860f-70d670eb1174.png
URLScan screenshot (2026-04-29T14:00:30Z): https://screenshots.phishdestroy.io/us/019dd98a-7533-70c1-a417-b56e6906f0ba.png
URLScan capture report: https://urlscan.io/result/019dd98a-7533-70c1-a417-b56e6906f0ba/
URLScan screenshot (2026-10-27T21:33:13Z): https://screenshots.phishdestroy.io/us/01a17f47-fc27-700d-b291-cf3697d4bde0.png
URLScan capture report: https://urlscan.io/result/01a17f47-fc27-700d-b291-cf3697d4bde0/
VirusTotal report: https://www.virustotal.com/gui/domain/glimmervault-horizon.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=glimmervault-horizon.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-27 21:45:19 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/019ddd59-9953-7591-9c3d-66c770eeac59.png
  Captured: 2026-10-27 21:19:21 UTC
- URLScan · 2026-04-29: https://screenshots.phishdestroy.io/us/019dd98a-7533-70c1-a417-b56e6906f0ba.png
  Captured: 2026-04-29 14:00:30 UTC
  Source report: https://urlscan.io/result/019dd98a-7533-70c1-a417-b56e6906f0ba/
  SHA-256: 8fe8bd6f0d4e35a00c41fd3c55785ecbf6be8214e818da7057c266dbb8ac6dae
- URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17f47-fc27-700d-b291-cf3697d4bde0.png
  Captured: 2026-10-27 21:33:13 UTC
  Source report: https://urlscan.io/result/01a17f47-fc27-700d-b291-cf3697d4bde0/
  SHA-256: 1fb920c1ed848e7b54a56aea50925ea81c91cc7b4e29dbda8edf5c44586530d4
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/9d32098c-ee0d-4cc2-860f-70d670eb1174.png
  Captured: 2026-10-27 21:42:36 UTC
  Source report: https://radar.cloudflare.com/scan/9d32098c-ee0d-4cc2-860f-70d670eb1174
  SHA-256: c92527a69aa3fcebe780fb0d114e03d6a626390234da8bc5086dbbd206c8b559

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-27T21:44:37Z",
        "uuid": "019ddd59-9953-7591-9c3d-66c770eeac59",
        "scanned_at": "2026-04-30T07:46:00Z",
        "final_url": "http://glimmervault-horizon.com/",
        "domain_age_days": 162,
        "apex_age_days": 162,
        "requests": 1,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 81,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-27T21:44:39Z",
        "uuid": "9d32098c-ee0d-4cc2-860f-70d670eb1174",
        "scanned_at": "2026-10-27T21:42:36Z",
        "final_url": "https://glimmervault-horizon.com/",
        "status": 200,
        "history": [
            {
                "url": "https://glimmervault-horizon.com/",
                "status": 200
            }
        ],
        "dom_hash": "6f581d7a067e4f4d9088edf3075d62ff1b2167feb916c0b5981aeb51a3f34d74",
        "doc_hash": "682293fb4b050cddceee266d340b2fcf0c017ccd28cee566809d4a274b30e23e",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "glimmervault-horizon.com",
                "type": "A",
                "value": "172.67.207.147"
            },
            {
                "name": "glimmervault-horizon.com",
                "type": "A",
                "value": "104.21.22.232"
            },
            {
                "name": "glimmervault-horizon.com",
                "type": "AAAA",
                "value": "2606:4700:3032::6815:16e8"
            },
            {
                "name": "glimmervault-horizon.com",
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:cf93"
            }
        ],
        "dnssec_valid": false,
        "ip": "127.0.1.10",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Porkbun LLC",
            "created": "2025-11-18T08:54:46Z",
            "updated": "2025-11-20T08:22:37Z",
            "expires": "2026-11-18T08:54:46Z",
            "nameservers": [
                "ainsley.ns.cloudflare.com",
                "tate.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-27T21:41:30Z",
        "analysis_at": "2026-10-22T00:02:19Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 14,
            "suspicious": 2,
            "undetected": 33
        },
        "detections": {
            "ESET": "suspicious",
            "VIPRE": "malware",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "created": "2025-11-18T00:00:00Z",
        "updated": "2025-11-18T00:00:00Z",
        "first_seen": "2025-11-18T09:18:32Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "tate.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ainsley.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.22.232"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:cf93"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::6815:16e8"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "ainsley.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.207.147"
            }
        ],
        "dns_at": "2026-10-22T00:10:48Z",
        "jarm": "27d40d40d00040d1dc27d40d27d40d5fb4c89fe3813d172ffb53f84a68f750",
        "cert": {
            "san": [
                "glimmervault-horizon.com",
                "*.glimmervault-horizon.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "23bc5b8554dd053f0e213b23a212854d",
            "sha256": "e6d04495ed3f3d80894eb34822826b90828f93b830adee04a51801c1090729ca",
            "subject": "glimmervault-horizon.com",
            "valid_to": "2026-12-10T21:34:00Z",
            "valid_from": "2026-09-11T20:36:19Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "delete prohibited",
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2026-11-18T08:54:46Z",
                "last changed": "2025-11-18T08:54:46Z",
                "registration": "2025-11-18T08:54:46Z",
                "registrar expiration": "2026-11-18T08:54:46Z",
                "last update of RDAP database": "2025-11-18T08:54:46Z"
            },
            "registrar": "Porkbun LLC",
            "registrar_iana_id": "1861"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-27T21:44:51Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "glimmervault-horizon.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-27T21:23:18Z",
            "first": "2026-10-27T21:23:18Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 3106
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true
        },
        "social_tags": {
            "themeColor": "#ffffff"
        },
        "trackers": {
            "requests": 11
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 5,
                "tls": 43,
                "wait": 129,
                "connect": 10,
                "download": 1
            },
            "response_ms": 188
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256",
            "protocol": "TLSv1.2",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 4162,
            "co2_grams": 0.0002,
            "cleaner_than": 91
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.44.191",
                    "host": "tate.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.38.211",
                    "host": "ainsley.ns.cloudflare.com"
                }
            ],
            "zone": "glimmervault-horizon.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "surfer_uuid"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3032::6815:16e8",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "glimmervault-horizon.com"
        },
        "dns": {
            "A": [
                "104.21.22.232",
                "172.67.207.147"
            ],
            "NS": [
                "ainsley.ns.cloudflare.com",
                "tate.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"ainsley.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415322194, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3032::6815:16e8",
                "2606:4700:3031::ac43:cf93"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3032::6815:16e8",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://glimmervault-horizon.com"
            ]
        },
        "whois": {
            "registrar": "Porkbun LLC",
            "created": "2025-11-18T08:54:46Z",
            "updated": "2025-11-20T08:22:37Z",
            "expires": "2026-11-18T08:54:46Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ainsley.ns.cloudflare.com",
                "tate.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```