# PhishDestroy domain threat record: brillapoint.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/brillapoint.com/ Machine-readable companion: https://phishdestroy.io/domain/brillapoint.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-23 14:27:28 UTC - Stored record updated: 2026-10-23 16:30:25 UTC - VirusTotal detections in the stored snapshot: 18/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 172.67.157.106 - Registrar in stored WHOIS data: Dynadot Inc - Last stored HTTP status: 200 - Registration date (registry RDAP, brillapoint.com): 2025-12-08 08:58:52 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a145f1-38b9-77df-b28c-5fc6bfc839c3/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/brillapoint.com - Certificate Transparency search: https://crt.sh/?q=%25.brillapoint.com - Web Archive lookup: https://web.archive.org/web/*/https://brillapoint.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added brillapoint.com to its internal blocklist on 2026-10-23 based on a trusted auto‑rule that flags domains older than 300 days. The domain was first seen by PhishDestroy on that same date. An HTTP fetch performed on 2026-10-23 returned a 403 status, while a later urlscan capture on 2026-10-16 showed a 200 response after an HTTPS redirect. How the scam works The available detections indicate the site may be used for malicious purposes, but no concrete phishing page, malware download, or credential‑harvesting form was observed in the captured content. Consequently, the listing reflects a general risk classification rather than a confirmed specific scam technique. Evidence VirusTotal recorded 18 detections from 92 engines on 2026-10-21, labeling the domain as malicious (15 engines) or suspicious (3 engines) across vendors such as BitDefender, ESET and Forcepoint ThreatSeeker. Google Safe Browsing checked the domain on 2026-10-23 and reported no threat. urlscan.io’s engine score marked the page malicious with a score of 89 on 2026-10-16, but its overall verdict was non‑malicious. Cloudflare Radar scanned the site on 2026-10-23 and flagged it as malicious in the malware category. OTX listed one pulse referencing the domain on 2026-10-23, and external blocklists returned zero matches on the same day. PhishDestroy’s internal list includes the domain. Infrastructure The domain was registered on 2025-12-08 through Dynadot Inc with a client‑transfer‑prohibited status. DNS records resolve to Cloudflare IP addresses 172.67.157.106 and 104.21.81.65 (and corresponding IPv6 addresses), and the TLS certificate issued by Google Trust Services on 2026-09-29 is valid for 90 days covering *.brillapoint.com. No DNSSEC records were observed for the zone. What to do Visitors should avoid entering any credentials or downloading files from the site and should change passwords only if they suspect they have submitted information. Organizations can block the exact domain name in web filters and monitor outbound traffic for connections to the recorded Cloudflare IPs. Security teams should review access logs for any requests to brillapoint.com and treat the domain as potentially malicious pending further investigation. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a145f1-38b9-77df-b28c-5fc6bfc839c3/ Cloudflare Radar report: https://radar.cloudflare.com/scan/a89a602e-72a5-448e-8940-2c3ba022a4cc Stored capture screenshot: https://urlscan.io/screenshots/01a145f1-38b9-77df-b28c-5fc6bfc839c3.png Cloudflare Radar screenshot (2026-10-23T14:28:06Z): https://screenshots.phishdestroy.io/cf/a89a602e-72a5-448e-8940-2c3ba022a4cc.png VirusTotal report: https://www.virustotal.com/gui/domain/brillapoint.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=brillapoint.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-23 14:29:29 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a145f1-38b9-77df-b28c-5fc6bfc839c3.png Captured: 2026-10-23 14:27:28 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a145f1-38b9-77df-b28c-5fc6bfc839c3.png Source report: https://urlscan.io/result/01a145f1-38b9-77df-b28c-5fc6bfc839c3/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/a89a602e-72a5-448e-8940-2c3ba022a4cc.png Captured: 2026-10-23 14:28:06 UTC Source report: https://radar.cloudflare.com/scan/a89a602e-72a5-448e-8940-2c3ba022a4cc SHA-256: c92527a69aa3fcebe780fb0d114e03d6a626390234da8bc5086dbbd206c8b559 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-23T14:28:41Z", "uuid": "01a145f1-38b9-77df-b28c-5fc6bfc839c3", "scanned_at": "2026-10-16T18:20:06Z", "final_url": "https://brillapoint.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://brillapoint.com/", "from": "http://brillapoint.com/", "status": 307 } ], "ip": "104.21.81.65", "ips": [ "104.21.81.65" ], "asns": [ "13335" ], "doc_hash": "867b7292790951117300e081f9238b4377cde851f31590c62d1f2771c2a9d719", "script_hashes": [ "186af7895e9e9866016a6c7d0c14773bdb57a84131ec8dc179ad00c29261d416", "f5c0d7df3136feeaccc8d3a35b4e1e1f6740364fed66d7e5a7e5473adf7ae997", "7287415f1722a1f1bec115343804dd3fa9edb7aaf615c18dd97e7fc5963d7ca8", "6974c99b4065682ccc547b516eb5c79dd91849622b204fee9ac4543a21a2d377", "00fd6d6e785a245fe3bb77e4e994bbd02f829731baf886ddbed4c1554d738e7c", "00c9e8f1f5e39c8cf3f1f1f0f933c3b9a44483bf8b42162e11634a55a3594316", "bf84c654783f6f7197eb5d3d7b6a25beff0f636fdf2254bf2b119f84eff2f5c1", "dd2210f66003c7d35be6a10eead90ff0e052b48bdc23aef65de4bb1ad117ad45" ], "globals": [ "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "__buildAssetsURL", "__publicAssetsURL", "$fetch", "global", "__unctx__", "__unctx_async_handlers__", "__VUE__", "useNuxtApp" ], "cookies": [ "surfer_uuid" ], "tls": { "san": [ "brillapoint.com", "*.brillapoint.com" ], "cipher": "AES_128_GCM", "issuer": "WE1", "subject": "brillapoint.com", "protocol": "QUIC", "valid_to": "2026-12-28T15:17:03Z", "valid_from": "2026-09-29T14:18:29Z" }, "domain_age_days": 312, "apex_age_days": 312, "tls_age_days": 17, "tls_valid_days": 90, "requests": 13, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 89, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-23T14:28:43Z", "uuid": "a89a602e-72a5-448e-8940-2c3ba022a4cc", "scanned_at": "2026-10-23T14:28:06Z", "final_url": "https://brillapoint.com/", "status": 200, "history": [ { "url": "https://brillapoint.com/", "status": 200 } ], "dom_hash": "6f581d7a067e4f4d9088edf3075d62ff1b2167feb916c0b5981aeb51a3f34d74", "doc_hash": "c16a5272aa9c89b9285f7cc0e20bdfcb13f98c887a03ef2e0e16c4c5bcb772d8", "phishing_v2": [ "phishing" ], "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "brillapoint.com", "type": "A", "value": "172.67.157.106" }, { "name": "brillapoint.com", "type": "A", "value": "104.21.81.65" }, { "name": "brillapoint.com", "type": "AAAA", "value": "2606:4700:3037::6815:5141" }, { "name": "brillapoint.com", "type": "AAAA", "value": "2606:4700:3031::ac43:9d6a" } ], "dnssec_valid": false, "ip": "172.67.157.106", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2025-12-08T08:58:52Z", "updated": "2025-12-08T09:17:59Z", "expires": "2026-12-08T08:58:52Z", "nameservers": [ "gail.ns.cloudflare.com", "max.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-23T14:27:52Z", "analysis_at": "2026-10-21T18:04:08Z", "stats": { "timeout": 0, "harmless": 43, "malicious": 15, "suspicious": 3, "undetected": 31 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Yandex Safebrowsing": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2025-12-08T00:00:00Z", "updated": "2025-12-08T00:00:00Z", "first_seen": "2025-12-08T09:14:13Z", "dns": [ { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "gail.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "max.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.81.65" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:9d6a" }, { "ttl": 300, "type": "A", "value": "172.67.157.106" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3037::6815:5141" }, { "ttl": 21600, "type": "NS", "value": "gail.ns.cloudflare.com" } ], "dns_at": "2026-10-21T18:09:47Z", "jarm": "27d40d40d00040d1dc27d40d27d40d5fb4c89fe3813d172ffb53f84a68f750", "cert": { "san": [ "brillapoint.com", "*.brillapoint.com" ], "issuer": "Google Trust Services / WE1", "serial": "336011d59f6011511387b6c6f3611a6e", "sha256": "13585b5d48b3cc5d14f81bfe933d78771d5611d613bda3083cdc64afc4b03887", "subject": "brillapoint.com", "valid_to": "2026-12-28T15:17:03Z", "valid_from": "2026-09-29T14:18:29Z" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2026-12-08T08:58:52Z", "last changed": "2025-12-08T09:17:59Z", "registration": "2025-12-08T08:58:52Z", "registrar expiration": "2026-12-08T08:58:52Z", "last update of RDAP database": "2026-10-16T06:38:12Z" }, "registrar": "DYNADOT LLC", "registrar_iana_id": "472" } }, "webcheck": { "v": 1, "fetched_at": "2026-10-23T14:28:54Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "brillapoint.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-23T14:28:42Z", "first": "2026-10-09T22:04:47Z", "changes": 1, "days_archived": 2, "scans_per_day": 0.07, "avg_page_bytes": 1945 }, "robots_txt": { "agents": [ "*" ], "present": true }, "social_tags": { "themeColor": "#ffffff" }, "trackers": { "requests": 11 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 2, "tls": 20, "wait": 162, "connect": 7, "download": 0 }, "response_ms": 191 }, "tls_connection": { "alpn": "h2", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256", "protocol": "TLSv1.2", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 4135, "co2_grams": 0.0002, "cleaner_than": 91 }, "dns_server": { "ns": [ { "ip": "173.245.58.116", "host": "gail.ns.cloudflare.com" }, { "ip": "173.245.59.132", "host": "max.ns.cloudflare.com" } ], "zone": "brillapoint.com" }, "cookies": { "cookies": [ { "name": "surfer_uuid" } ] }, "location": { "ip": "2606:4700:3031::ac43:9d6a", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Google Trust Services / WE1", "subject": "brillapoint.com" }, "dns": { "A": [ "104.21.81.65", "172.67.157.106" ], "NS": [ "max.ns.cloudflare.com", "gail.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"gail.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2416678571, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3031::ac43:9d6a", "2606:4700:3037::6815:5141" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3031::ac43:9d6a", "family": 6 }, "redirects": { "chain": [ "https://brillapoint.com" ] }, "tech_stack": { "technologies": [ "Node.js", "Envoy", "Vue.js", "Nuxt.js", "Google Font API", "Cloudflare", "HTTP/3" ] }, "whois": { "registrar": "Dynadot Inc", "created": "2025-12-08T08:58:52Z", "updated": "2025-12-08T09:17:59Z", "expires": "2026-12-08T08:58:52Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "gail.ns.cloudflare.com", "max.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html; charset=utf-8" } } } } ```