# PhishDestroy domain threat record: glintor-gear.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/glintor-gear.com/ Machine-readable companion: https://phishdestroy.io/domain/glintor-gear.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-27 21:19:27 UTC - Last availability or vendor check: 2026-10-27 23:00:26 UTC - Stored record updated: 2026-10-27 23:30:55 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 104.21.1.30 - Registrar in stored WHOIS data: Porkbun LLC - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2025-11-18 07:51:13 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019ddd59-9d8f-76a6-a43d-56bde24b72a8/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/glintor-gear.com - Certificate Transparency search: https://crt.sh/?q=%25.glintor-gear.com - Web Archive lookup: https://web.archive.org/web/*/https://glintor-gear.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added glintor-gear.com to its internal blocklist on 2026-10-27 after an automated trusted‑auto rule flagged the domain because it was 343 days old. A page fetch performed on that date returned HTTP 403, indicating the site denied access. An earlier urlscan capture on 2026-04-30 recorded a reachable page that returned HTTP 200, but no page title was identified. How the scam works No specific fraudulent behavior was observed on the captured page, so the listing relies on external detections rather than a demonstrated scheme. The domain is therefore treated as a generic suspicious site that could be used for phishing, malware distribution, or other deceptive activities. Evidence VirusTotal scanned the domain on 2026-10-23 and reported 18 detections from 92 engines, including 15 malicious and 3 suspicious verdicts from vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked on 2026-10-27 and did not flag the domain. urlscan.io captured the site on 2026-04-30; its engine analysis gave a malicious score of 94 with tags indicating malicious content, while the overall verdict was non‑malicious. Cloudflare Radar scanned the domain on 2026-10-27 and labeled it as phishing and malware. OTX listed one pulse referencing the domain on 2026-10-27. PhishDestroy’s internal blocklist marks the domain as blocked, and no external blocklists reported it as blocked on the check date. Infrastructure The domain was registered with Porkbun LLC on 2025-11-18 and is set to expire on 2026-11-18. DNS records resolve to Cloudflare IP addresses 104.21.1.30 and 172.67.151.230 (and corresponding AAAA records), and the network is identified as Cloudflare, Inc. (Canada). TLS is provided by a Google Trust Services certificate valid from 2026-09-12 to 2026-12-11, and DNSSEC is not enabled. What to do Avoid entering any credentials, downloading files, or interacting with forms on this site. If any login information was submitted, change the associated passwords immediately. Defenders should block the exact domain glintor-gear.com in firewalls and review access logs for connections to the recorded IP addresses. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019ddd59-9d8f-76a6-a43d-56bde24b72a8/ Cloudflare Radar report: https://radar.cloudflare.com/scan/81cd8e4d-2fd7-464c-8d5c-3b18316ce8be Stored capture screenshot: https://urlscan.io/screenshots/019ddd59-9d8f-76a6-a43d-56bde24b72a8.png Cloudflare Radar screenshot (2026-10-27T21:42:34Z): https://screenshots.phishdestroy.io/cf/81cd8e4d-2fd7-464c-8d5c-3b18316ce8be.png URLScan screenshot (2026-04-29T03:30:39Z): https://screenshots.phishdestroy.io/us/019dd749-bfbb-75b3-83f8-ab18c0eeabcf.png URLScan capture report: https://urlscan.io/result/019dd749-bfbb-75b3-83f8-ab18c0eeabcf/ URLScan screenshot (2026-04-29T07:40:46Z): https://screenshots.phishdestroy.io/us/019dd82e-c751-75ff-ab72-fd7bba878694.png URLScan capture report: https://urlscan.io/result/019dd82e-c751-75ff-ab72-fd7bba878694/ URLScan screenshot (2026-10-27T21:34:36Z): https://screenshots.phishdestroy.io/us/01a17f49-3c79-700b-a97b-f45c74b0748d.png URLScan capture report: https://urlscan.io/result/01a17f49-3c79-700b-a97b-f45c74b0748d/ VirusTotal report: https://www.virustotal.com/gui/domain/glintor-gear.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=glintor-gear.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-27 21:44:27 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019ddd59-9d8f-76a6-a43d-56bde24b72a8.png Captured: 2026-10-27 21:19:27 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/019ddd59-9d8f-76a6-a43d-56bde24b72a8.png Source report: https://urlscan.io/result/019ddd59-9d8f-76a6-a43d-56bde24b72a8/ - URLScan · 2026-04-29: https://screenshots.phishdestroy.io/us/019dd749-bfbb-75b3-83f8-ab18c0eeabcf.png Captured: 2026-04-29 03:30:39 UTC Source report: https://urlscan.io/result/019dd749-bfbb-75b3-83f8-ab18c0eeabcf/ SHA-256: 8fe8bd6f0d4e35a00c41fd3c55785ecbf6be8214e818da7057c266dbb8ac6dae - URLScan · 2026-04-29: https://screenshots.phishdestroy.io/us/019dd82e-c751-75ff-ab72-fd7bba878694.png Captured: 2026-04-29 07:40:46 UTC Source report: https://urlscan.io/result/019dd82e-c751-75ff-ab72-fd7bba878694/ SHA-256: 8fe8bd6f0d4e35a00c41fd3c55785ecbf6be8214e818da7057c266dbb8ac6dae - URLScan · 2026-10-27: https://screenshots.phishdestroy.io/us/01a17f49-3c79-700b-a97b-f45c74b0748d.png Captured: 2026-10-27 21:34:36 UTC Source report: https://urlscan.io/result/01a17f49-3c79-700b-a97b-f45c74b0748d/ SHA-256: 1fb920c1ed848e7b54a56aea50925ea81c91cc7b4e29dbda8edf5c44586530d4 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/81cd8e4d-2fd7-464c-8d5c-3b18316ce8be.png Captured: 2026-10-27 21:42:34 UTC Source report: https://radar.cloudflare.com/scan/81cd8e4d-2fd7-464c-8d5c-3b18316ce8be SHA-256: c92527a69aa3fcebe780fb0d114e03d6a626390234da8bc5086dbbd206c8b559 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-27T21:43:36Z", "uuid": "019ddd59-9d8f-76a6-a43d-56bde24b72a8", "scanned_at": "2026-04-30T07:45:36Z", "final_url": "https://glintor-gear.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://glintor-gear.com/", "from": "http://glintor-gear.com/", "status": 307 } ], "ip": "172.67.151.230", "ips": [ "172.67.151.230" ], "asns": [ "13335" ], "doc_hash": "f319a428bd579c7939af15f7979a3fbb7b5514b4badd3b91db0b795f4b87e74b", "script_hashes": [ "df87eab8f1eebc9dec902c576ca66dc9a269b4c39099cce8960c1ab2ebadceba", "f5c0d7df3136feeaccc8d3a35b4e1e1f6740364fed66d7e5a7e5473adf7ae997", "c00469adcee1aad554c622325d9891174123ca37c7af3e61be04175121ca6eb7", "5c7145bd683c604e00afd4fc3df68eda9da1bb863cd9ea574be62ca7f5f3f3fc", "f10414d6bd6b3d91fee2cb284ffa7e9e0201bc95f4526a90d7819013fa79db66", "d597dc1d9575b82dd78f84b1bc4327fe5e8c96d7718ada88b7b0553c287fbe5f", "f2810f184af8974e2f72fb0152312ce6550133c063daf6aac1feafc07eb25140", "ccc5d665823e48c20d88a72fcd39c0a2a69055e03357b98f2d0fc50d3baf75aa" ], "globals": [ "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "__buildAssetsURL", "__publicAssetsURL", "$fetch", "global", "__unctx__", "__unctx_async_handlers__", "__VUE__", "useNuxtApp" ], "cookies": [ "surfer_uuid" ], "tls": { "san": [ "glintor-gear.com", "*.glintor-gear.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "glintor-gear.com", "protocol": "QUIC", "valid_to": "2026-06-16T16:10:02Z", "valid_from": "2026-03-18T15:12:34Z" }, "domain_age_days": 162, "apex_age_days": 162, "tls_age_days": 42, "tls_valid_days": 90, "requests": 13, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 94, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-27T21:43:37Z", "uuid": "81cd8e4d-2fd7-464c-8d5c-3b18316ce8be", "scanned_at": "2026-10-27T21:42:34Z", "final_url": "https://glintor-gear.com/", "status": 200, "history": [ { "url": "https://glintor-gear.com/", "status": 200 } ], "dom_hash": "6f581d7a067e4f4d9088edf3075d62ff1b2167feb916c0b5981aeb51a3f34d74", "doc_hash": "07aa9456f31d2b8f4ef81ee08d478fb11d9c4cf0d5a49956e4090669241bf1e6", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "glintor-gear.com", "type": "A", "value": "172.67.151.230" }, { "name": "glintor-gear.com", "type": "A", "value": "104.21.1.30" }, { "name": "glintor-gear.com", "type": "AAAA", "value": "2606:4700:3036::ac43:97e6" }, { "name": "glintor-gear.com", "type": "AAAA", "value": "2606:4700:3037::6815:11e" } ], "dnssec_valid": false, "ip": "127.0.1.6", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Porkbun LLC", "created": "2025-11-18T08:51:13Z", "updated": "2025-11-20T08:02:30Z", "expires": "2026-11-18T08:51:13Z", "nameservers": [ "coleman.ns.cloudflare.com", "virginia.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-27T21:41:30Z", "analysis_at": "2026-10-23T12:19:41Z", "stats": { "timeout": 0, "harmless": 42, "malicious": 15, "suspicious": 3, "undetected": 32 }, "detections": { "CRDF": "malicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "URLQuery": "suspicious", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "malicious", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Malicious (alphaMountain.ai)" }, "created": "2025-11-18T00:00:00Z", "updated": "2025-11-18T00:00:00Z", "first_seen": "2025-11-18T09:18:46Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "coleman.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.1.30" }, { "ttl": 21600, "type": "NS", "value": "virginia.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3036::ac43:97e6" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:11e" }, { "ttl": 21600, "type": "NS", "value": "coleman.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "172.67.151.230" } ], "dns_at": "2026-10-23T12:25:02Z", "jarm": "27d40d40d00040d1dc27d40d27d40d5fb4c89fe3813d172ffb53f84a68f750", "cert": { "san": [ "glintor-gear.com", "*.glintor-gear.com" ], "issuer": "Google Trust Services / WE1", "serial": "a8d4c05c04648253136e2508cc132072", "sha256": "c8b6a46fb6c908f0313f7400f95c7fec7aaffcb7c32a58439c45ffcd71a2dd1e", "subject": "glintor-gear.com", "valid_to": "2026-12-11T09:00:45Z", "valid_from": "2026-09-12T08:00:49Z" }, "whois": [], "rdap": { "status": [ "delete prohibited", "transfer prohibited" ], "events": { "expiration": "2026-11-18T08:51:13Z", "last changed": "2025-11-18T08:51:13Z", "registration": "2025-11-18T08:51:13Z", "registrar expiration": "2026-11-18T08:51:13Z", "last update of RDAP database": "2025-11-18T08:51:13Z" }, "registrar": "Porkbun LLC", "registrar_iana_id": "1861" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-27T21:43:50Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "glintor-gear.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-27T21:23:05Z", "first": "2026-10-27T21:23:05Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 3077 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "themeColor": "#ffffff" }, "trackers": { "requests": 11 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 21, "tls": 51, "wait": 138, "connect": 7, "download": 0 }, "response_ms": 217 }, "tls_connection": { "alpn": "h2", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256", "protocol": "TLSv1.2", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 4138, "co2_grams": 0.0002, "cleaner_than": 91 }, "dns_server": { "ns": [ { "ip": "162.159.44.64", "host": "coleman.ns.cloudflare.com" }, { "ip": "108.162.194.37", "host": "virginia.ns.cloudflare.com" } ], "zone": "glintor-gear.com" }, "cookies": { "cookies": [ { "name": "surfer_uuid" } ] }, "location": { "ip": "2606:4700:3037::6815:11e", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "glintor-gear.com" }, "dns": { "A": [ "104.21.1.30", "172.67.151.230" ], "NS": [ "coleman.ns.cloudflare.com", "virginia.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"coleman.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416248507, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3036::ac43:97e6", "2606:4700:3037::6815:11e" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3036::ac43:97e6", "family": 6 }, "redirects": { "chain": [ "https://glintor-gear.com" ] }, "tech_stack": { "technologies": [ "Node.js", "Envoy", "Vue.js", "Nuxt.js", "Google Font API", "Cloudflare", "HTTP/3" ] }, "whois": { "registrar": "Porkbun LLC", "created": "2025-11-18T08:51:13Z", "updated": "2025-11-20T08:02:30Z", "expires": "2026-11-18T08:51:13Z", "status": [ "clientDeleteProhibited https://icann.org/epp", "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "coleman.ns.cloudflare.com", "virginia.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```