glacieranchorworks[.]com

The domain glacieranchorworks.com was registered on July 03, 2026 through Ultahost, Inc. and is currently hosted on Cloudflare infrastructure, as indicated by its authoritative nameservers fatima.ns.cloudflare.com and memphis.ns.cloudflare.com. DNS resolution points to the IP address 104.21.44.95, a Cloudflare edge node that commonly masks the true backend server location. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one threat‑intelligence source has classified it as malicious.

VirusTotal has processed the domain with 91 antivirus and URL scanners; none of the engines reported a detection, but the absence of a positive result does not constitute evidence of benign behavior. No additional public indicators such as SSL certificate details, HTTP response codes, page title, or brand targeting have been disclosed, leaving the specific phishing payload or luring technique unknown. The short lifespan—created only weeks before the report date—combined with the use of reputable CDN services is consistent with opportunistic phishing campaigns that rely on fast‑flux hosting to evade takedown.

Defenders should treat glacieranchorworks.com as a high‑confidence phishing indicator, add the domain to network‑level deny lists, monitor DNS queries for resolution to 104.21.44.95, and enforce URL filtering based on the blocklist entry. Continuous re‑evaluation is advised, as additional telemetry such as content analysis or sinkhole data may emerge and refine the risk posture.