# PhishDestroy domain threat record: bookaan.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/bookaan.com/
Machine-readable companion: https://phishdestroy.io/domain/bookaan.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 12:07:04 UTC
- Last availability or vendor check: 2026-10-23 12:07:04 UTC
- Stored record updated: 2026-10-23 14:30:47 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.78.56
- Registrar in stored WHOIS data: DYNADOT LLC
- Last stored HTTP status: 200
- Registration date (registry RDAP, bookaan.com): 2026-08-19 03:20:55 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a168a6-f257-70b8-a471-d17f5a4de7ba/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/bookaan.com
- Certificate Transparency search: https://crt.sh/?q=%25.bookaan.com
- Web Archive lookup: https://web.archive.org/web/*/https://bookaan.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added bookaan.com to its internal blocklist on 2026-10-23 after the site was first seen by the project on that date. The recorded page title advertises a gambling experience called “BANTAI189”. An HTTP 200 response was observed on the same day, confirming the site was reachable at the time of assessment.

How the scam works
The listing reflects a generic risk associated with fake gambling or investment sites that promise rapid earnings and encourage users to deposit money or share personal details. Such pages typically lure visitors with flashy claims, then may request payments, account credentials, or direct users to external payment services. No specific wallet‑draining or credential‑harvesting behavior was observed on this page, so the assessment remains at the level of a suspicious gambling‑style offering.

Evidence
VirusTotal reported one suspicious detection from Gridinsoft out of 92 engines on 2026-10-19. Google Safe Browsing did not flag the domain on 2026-10-23. URLScan’s engine analysis marked the site as malicious with a score of 82, though its overall verdict was non‑malicious on 2026-10-23. OTX listed seven pulses mentioning the domain on the same day. PhishDestroy’s internal blocklist includes the domain, while external blocklists checked on 2026-10-23 returned zero matches.

Infrastructure
The domain was registered with Dynadot on 2026-08-19 and is hosted behind Cloudflare, appearing from IP addresses 104.21.78.56 and 172.67.217.52 in Canada. The TLS certificate, issued by Google Trust Services, is valid until 2027-01-15 and covers both the apex and subdomains. The recorded web application firewall was Cloudflare.

What to do
Visitors should avoid entering any personal, financial, or login information on the site and should monitor any accounts for unexpected activity. If credentials were submitted, change the associated passwords immediately. Network defenders should block traffic to bookaan.com and review logs for any connections to the recorded IPs or hostnames.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a168a6-f257-70b8-a471-d17f5a4de7ba/
Cloudflare Radar report: https://radar.cloudflare.com/scan/edb28ced-7eab-459a-9f9a-8999a3fa39fd
URLQuery report: https://urlquery.net/report/1e7504cd-20cf-4b4a-b899-8f92f8522653
Stored capture screenshot: https://i.ibb.co/Q70s0Njk/c2b5ec6f0313.png
Cloudflare Radar screenshot (2026-10-23T12:38:27Z): https://screenshots.phishdestroy.io/cf/edb28ced-7eab-459a-9f9a-8999a3fa39fd.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/1e7504cd-20cf-4b4a-b899-8f92f8522653.png
URLScan screenshot (2026-10-23T12:15:23Z): https://screenshots.phishdestroy.io/us/01a168af-c6be-7053-8a0d-b5e630a41d5e.png
URLScan capture report: https://urlscan.io/result/01a168af-c6be-7053-8a0d-b5e630a41d5e/
VirusTotal report: https://www.virustotal.com/gui/domain/bookaan.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bookaan.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 12:39:28 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/Q70s0Njk/c2b5ec6f0313.png
  Captured: 2026-10-23 12:07:04 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a168a6-f257-70b8-a471-d17f5a4de7ba.png
  Captured: 2026-10-23 12:07:04 UTC
  Source report: https://urlscan.io/result/01a168a6-f257-70b8-a471-d17f5a4de7ba/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/edb28ced-7eab-459a-9f9a-8999a3fa39fd.png
  Captured: 2026-10-23 12:38:27 UTC
  Source report: https://radar.cloudflare.com/scan/edb28ced-7eab-459a-9f9a-8999a3fa39fd
  SHA-256: 55f26bd8ee62583220488b310564742535f2aec41731d8d7ef73791f7cfb5ab9
- URLQuery: https://screenshots.phishdestroy.io/uq/1e7504cd-20cf-4b4a-b899-8f92f8522653.png
  Source report: https://urlquery.net/report/1e7504cd-20cf-4b4a-b899-8f92f8522653
  SHA-256: f641a3451f1b5a8e9164369a881c92ca5137d3df6fdf7ddaa36b46f8bc6f49d8
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a168af-c6be-7053-8a0d-b5e630a41d5e.png
  Captured: 2026-10-23 12:15:23 UTC
  Source report: https://urlscan.io/result/01a168af-c6be-7053-8a0d-b5e630a41d5e/
  SHA-256: 5f0fbd53d54be56e2b5d4321d717f470cb4d89addcaa2e31b20af88a9a0ed0e1

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T12:38:44Z",
        "uuid": "01a168a6-f257-70b8-a471-d17f5a4de7ba",
        "scanned_at": "2026-10-23T12:05:42Z",
        "final_url": "https://bookaan.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://bookaan.com/",
                "from": "http://bookaan.com/",
                "status": 307
            }
        ],
        "ip": "104.21.78.56",
        "domains": [
            "static.cloudflareinsights.com",
            "hgqrm.top",
            "fonts.gstatic.com",
            "sl-group.store",
            "fonts.googleapis.com"
        ],
        "ips": [
            "142.250.195.163",
            "104.16.79.73",
            "172.67.138.197",
            "104.21.75.185",
            "142.251.222.234",
            "104.21.78.56"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "hgqrm.top",
            "www.bookaan.com"
        ],
        "doc_hash": "2676482df2b2b94cf49ed2e334a14e3eeb18de2fe56b8a464b0709968a2deec0",
        "script_hashes": [
            "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8"
        ],
        "globals": [
            "BANNER_CONFIG",
            "resizeCanvas",
            "drawLines",
            "animate",
            "openReviewPopup",
            "closeReviewPopup",
            "changeImage",
            "openModal",
            "closeModal",
            "handleAskQuestion",
            "changeLogo",
            "changeFavicon",
            "__cfBeacon",
            "canvas",
            "ctx",
            "particleCount",
            "particles",
            "connectionDistance",
            "mouse",
            "Particle"
        ],
        "tls": {
            "san": [
                "bookaan.com",
                "*.bookaan.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "bookaan.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-15T09:38:45Z",
            "valid_from": "2026-10-17T08:38:48Z"
        },
        "domain_age_days": 3436,
        "apex_age_days": 3436,
        "tls_age_days": 6,
        "tls_valid_days": 90,
        "requests": 14,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 82,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T12:38:46Z",
        "uuid": "edb28ced-7eab-459a-9f9a-8999a3fa39fd",
        "scanned_at": "2026-10-23T12:38:27Z",
        "final_url": "https://bookaan.com/",
        "status": 200,
        "history": [
            {
                "url": "https://bookaan.com/",
                "status": 200
            }
        ],
        "dom_hash": "8393e8a93856a8352fbb69492b12e3733737b6a80167a8822e0af5e4ad324999",
        "doc_hash": "2676482df2b2b94cf49ed2e334a14e3eeb18de2fe56b8a464b0709968a2deec0",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "bookaan.com",
                "type": "A",
                "value": "172.67.217.52"
            },
            {
                "name": "bookaan.com",
                "type": "A",
                "value": "104.21.78.56"
            },
            {
                "name": "bookaan.com",
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:d934"
            },
            {
                "name": "bookaan.com",
                "type": "AAAA",
                "value": "2606:4700:3037::6815:4e38"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.217.52",
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-19T03:20:55Z",
            "updated": "2026-08-19T05:49:30Z",
            "expires": "2027-08-19T03:20:55Z",
            "nameservers": [
                "leanna.ns.cloudflare.com",
                "peter.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T12:38:22Z",
        "analysis_at": "2026-10-19T10:21:07Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 0,
            "suspicious": 1,
            "undetected": 35
        },
        "detections": {
            "Gridinsoft": "suspicious"
        },
        "reputation": 0,
        "popularity": {
            "Alexa": 474326,
            "Statvoo": 474326
        },
        "created": "2025-05-28T00:00:00Z",
        "updated": "2026-05-31T00:00:00Z",
        "first_seen": "2024-03-05T10:45:49Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.217.52"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::ac43:d934"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::6815:4e38"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "leanna.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.78.56"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "leanna.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "peter.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-19T10:31:59Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "bookaan.com",
                "*.bookaan.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "f547dc048e4092550e37dc88b6da534e",
            "sha256": "606074109dbc9c24e71d5d16b1a4e509586521e5b1d8969096d82dfb973caf9c",
            "subject": "bookaan.com",
            "valid_to": "2027-01-15T09:38:45Z",
            "valid_from": "2026-10-17T08:38:48Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-08-19T03:20:55Z",
                "last changed": "2026-08-19T05:49:30Z",
                "registration": "2026-08-19T03:20:55Z",
                "registrar expiration": "2027-08-19T03:20:55Z",
                "last update of RDAP database": "2026-10-16T07:33:32Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T12:39:02Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "bookaan.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-23T12:09:34Z",
            "first": "2021-06-14T09:48:55Z",
            "changes": 17,
            "days_archived": 20,
            "scans_per_day": 0.01,
            "avg_page_bytes": 30465
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true,
            "sitemaps": [
                "https://www.bookaan.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "title": "BANTAI189 || Menang Bareng, Cuan Ngalir Deras!",
            "author": "BANTAI189",
            "robots": "index, follow, nosnippet",
            "keywords": "BANTAI189, slot gacor resmi, slot88, slot maxwin",
            "description": "BANTAI189 menghadirkan perpaduan permainan variatif dan gameplay seru yang membuat setiap sesi terasa lebih dinamis, kompetitif, dan penuh momen menarik.",
            "canonicalUrl": "https://www.bookaan.com/"
        },
        "trackers": {
            "requests": 10,
            "trackers": [
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Cloudflare Insights",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 3
                }
            ]
        },
        "mixed_content": {
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 19,
                "wait": 412,
                "connect": 6,
                "download": 6
            },
            "response_ms": 445
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 84461,
            "co2_grams": 0.0031,
            "cleaner_than": 26
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.151",
                    "host": "leanna.ns.cloudflare.com"
                },
                {
                    "ip": "162.159.44.3",
                    "host": "peter.ns.cloudflare.com"
                }
            ],
            "zone": "bookaan.com"
        },
        "location": {
            "ip": "2606:4700:3036::ac43:d934",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "bookaan.com"
        },
        "dns": {
            "A": [
                "172.67.217.52",
                "104.21.78.56"
            ],
            "NS": [
                "leanna.ns.cloudflare.com",
                "peter.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"leanna.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417715639, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3036::ac43:d934",
                "2606:4700:3037::6815:4e38"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3036::ac43:d934",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://bookaan.com"
            ]
        },
        "tech_stack": {
            "technologies": [
                "AMP",
                "Cloudflare Browser Insights",
                "Google Font API",
                "Cloudflare",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.bookaan.com/amp/",
                "https://hgqrm.top/farp/bantai189/banner-BANTAINEW2.webp"
            ],
            "external_count": 2,
            "internal_count": 1
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-08-19T03:20:55Z",
            "updated": "2026-08-19T05:49:30Z",
            "expires": "2027-08-19T03:20:55Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "leanna.ns.cloudflare.com",
                "peter.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```