Phishing detection: autoconfig.glovonetwork.com
Glovo Screenshot
Investigate
Domain
autoconfig.glovonetwork.com16 CT hosts on apex
urlscan
VirusTotal
Whois
IP
148.113.207.235
ipinfo
Greynoise
URL
https://autoconfig.glovonetwork.com
Phishunt analysis Beta
42
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +2.3 ASN reputation
- +2.2 Country mismatch
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.9 Young certificate
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Long domain
- +0.6 Login text in screenshot
- +0.3 Free CA
- +0.2 Suspicious TLD
- +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Autoconfig subdomain of a Glovo-branded lookalike domain on OVH in Canada, with brand text in the screenshot. It belongs to the same IP and certificate cluster as the other glovonetwork.com hosts and is flagged by Google Safe Browsing.
Google Safe BrowsingBrand in screenshotShared IP cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-08 · confidence 65%
Domain & Network
Whois
Registrar
PDR Ltd. d/b/a PublicDomainRegistry.com
Network
Country
Canada
Canada
Hosting
OVH SAS
ASN
AS16276
TLS Cert
YR1
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists