Is glycocalyx.com safe?

The scan of glycocalyx.com on 23 Aug 2026 reached no verdict either way (score 9). Too little was captured to judge it, which is an unknown rather than a pass.

How was glycocalyx.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

glycocalyx.com - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned glycocalyx.com and returned a unknown verdict (score 9), categorised as suspicious-infrastructure. The page resolved to 23.227.38.65 on Shopify, Inc. in CA. 18 domains and 2 IPs were contacted, over 31 HTTP requests. The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 9) · Confidence 18%
Scanned URL: https://glycocalyx.nl/userfiles/image/file/46933732432.pdf
Domain: glycocalyx.com · IP: 23.227.38.65 · AS13335 · CA
Server: cloudflare
Page title: 404 Not Found - GlycoCalyx
HTTP status: 404 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Oct 22 18: · subject CN=glycocalyx.com
HTTP requests captured: 31
Scan tier: standard · observed 2026-08-23 06:21:23 UTC

Redirect chain

https://glycocalyx.nl/userfiles/image/file/46933732432.pdf
https://glycocalyx.com/pages/glycocheckuserfiles/image/file/46933732432.pdf

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Algorithmically-generated (DGA-like) hostname
Valid TLS, no impersonation or off-origin credential post
Matches phishing-kit family "Meta / Facebook Login Kit"

Detected technologies

Cloudflare
Shopify
jQuery

Contacted infrastructure

23.227.38.65 - AS13335 Shopify, Inc. (Canada)
141.138.168.18 - AS20847 Antagonist B.V. (Netherlands)

Observed indicators

glycocalyx.com
fonts.shopifycdn.com
shop.app
cdn.shopify.com
cozyantitheft.addons.business
cdn.judge.me
cdn1.judge.me
api.judge.me
judge.me
static.klaviyo.com
ajax.googleapis.com
magecomp.us
monorail-edge.shopifysvc.com
account.glycocalyx.com
af.uppromote.com
www.shopify.com
code.tidio.co
static.rechargecdn.com
23.227.38.65
141.138.168.18

Other scans of glycocalyx.com (4)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

21 Aug 2026 - unknown · https://glycocalyx.com/pages/glycocheckuserfiles/image/file/44113519811.pdf
19 Aug 2026 - unknown · https://glycocalyx.com/pages/glycocheckuserfiles/image/file/19793068208.pdf
19 Aug 2026 - unknown · https://glycocalyx.com/pages/glycocheckuserfiles/image/file/19793068208.pdf
17 Aug 2026 - unknown · https://glycocalyx.com/pages/glycocheckuserfiles/image/file/zuvivasanudiwokifapop.pdf

Questions about glycocalyx.com

Is glycocalyx.com safe?: The scan of glycocalyx.com on 23 Aug 2026 reached no verdict either way (score 9). Too little was captured to judge it, which is an unknown rather than a pass.
How was glycocalyx.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of glycocalyx.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan