gleemcapes[.]biz

gleemcapes.biz was registered on 2025-09-02 through Global Domain Group LLC. The domain resolves to the IPv4 address 149.56.250.51 and is served by the authoritative name servers ns5.ddoscure.com, ns6.ddoscure.com, protected3.ddoscure.com and protected4.ddoscure.co. The hosting infrastructure appears to be part of the ddoscure.com namespace, which is frequently observed in malicious campaigns. As of the analysis date the domain remains active and is listed on a single public blocklist; the blocklist entry is also reflected in the PhishDestroy feed, which has actively blocked the domain. VirusTotal has recorded scans from 91 antivirus and URL‑reputation engines, none of which have raised a detection at the time of review. Although the absence of detections does not constitute assurance of legitimacy, it indicates that the domain has so far evaded signature‑based detection.

No public SSL certificate information, HTTP response codes, or page title metadata have been disclosed, limiting visibility into the web content. Consequently, the precise phishing lure, target brand, or credential‑collection page cannot be confirmed. The lack of additional blocklist references or threat‑intel identifiers such as OTX or Google Safe Browsing entries suggests limited propagation, but the presence on PhishDestroy indicates that at least one security vendor has observed malicious use. Given the current evidence, defenders should continue to monitor the domain for changes in hosting, DNS records, or the emergence of new detections.

Network‑level blocks can be applied using the known IP address 149.56.250.51 and the listed name servers. Email gateways and web proxy solutions should reference the PhishDestroy blocklist entry to pre‑empt potential phishing deliveries. Periodic rescans on multi‑engine platforms are recommended to detect any future payloads or URL‑based indicators that may be added to the domain.