# PhishDestroy domain threat record: brook-travels.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/brook-travels.com/
Machine-readable companion: https://phishdestroy.io/domain/brook-travels.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-23 14:28:36 UTC
- Stored record updated: 2026-10-23 16:30:25 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.75.53
- Registrar in stored WHOIS data: Porkbun LLC
- Last stored HTTP status: 200
- Registration date (registry RDAP, brook-travels.com): 2025-12-26 00:51:05 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a0b384-5788-70ed-b7d5-f0424a182667/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/brook-travels.com
- Certificate Transparency search: https://crt.sh/?q=%25.brook-travels.com
- Web Archive lookup: https://web.archive.org/web/*/https://brook-travels.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added brook-travels.com to its internal blocklist on 2026-10-23, classifying it as a suspicious domain under a trusted‑auto rule that flags domains older than 300 days. A page fetch performed the same day returned HTTP 403, indicating the site did not serve content at that moment. An earlier urlscan capture from 2026-09-18 recorded a successful HTTPS 200 response but did not capture a page title.

How the scam works
No specific phishing, malware, credential‑harvesting, or crypto‑related behavior was observed on the captured page, so the listing reflects a generic suspicion based on external detections rather than a confirmed scam mechanism.

Evidence
VirusTotal scanned the domain on 2026-10-23 and reported 18 detections from 92 engines, of which 16 were labeled malicious and 2 suspicious. Google Safe Browsing checked the domain on the same date and did not flag it. urlscan.io captured the site on 2026-09-18; its engine analysis gave a malicious score of 93 and tagged it with urlscan‑ml, while the overall verdict was non‑malicious. Cloudflare Radar captured the domain on 2026-10-23 and marked it malicious in the malware category. PhishDestroy’s internal blocklist flags the domain, whereas external blocklists checked on 2026-10-23 reported no listings. OTX listed two pulses referencing brook-travels.com as of 2026-10-23.

Infrastructure
The domain was registered with Porkbun LLC on 2025-12-26 and is set to expire on 2026-12-26. DNS records resolve to Cloudflare IP addresses 104.21.75.53, 172.67.214.137 and the IPv6 addresses 2606:4700:3034::ac43:d689 and 2606:4700:3035::6815:4b35. The TLS certificate, issued by Google Trust Services on 2026-08-29, is valid until 2026-11-27 and covers both brook-travels.com and *.brook-travels.com. The hosting network is identified as Cloudflare, Inc. in Canada.

What to do
Treat the site as untrusted; avoid entering any credentials, personal data, or cryptocurrency information. If credentials were submitted, change the associated passwords and review account activity. Defenders should block the exact domain in web filters and monitor network logs for connections to the recorded IP addresses.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a0b384-5788-70ed-b7d5-f0424a182667/
Cloudflare Radar report: https://radar.cloudflare.com/scan/2e79c09a-0e8b-45b3-905a-f1518e1dd03f
Stored capture screenshot: https://urlscan.io/screenshots/01a0b384-5788-70ed-b7d5-f0424a182667.png
Cloudflare Radar screenshot (2026-10-23T14:32:59Z): https://screenshots.phishdestroy.io/cf/2e79c09a-0e8b-45b3-905a-f1518e1dd03f.png
VirusTotal report: https://www.virustotal.com/gui/domain/brook-travels.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=brook-travels.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-23 15:09:05 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a0b384-5788-70ed-b7d5-f0424a182667.png
  Captured: 2026-10-23 14:28:36 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a0b384-5788-70ed-b7d5-f0424a182667.png
  Source report: https://urlscan.io/result/01a0b384-5788-70ed-b7d5-f0424a182667/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/2e79c09a-0e8b-45b3-905a-f1518e1dd03f.png
  Captured: 2026-10-23 14:32:59 UTC
  Source report: https://radar.cloudflare.com/scan/2e79c09a-0e8b-45b3-905a-f1518e1dd03f
  SHA-256: c92527a69aa3fcebe780fb0d114e03d6a626390234da8bc5086dbbd206c8b559

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T14:34:46Z",
        "uuid": "01a0b384-5788-70ed-b7d5-f0424a182667",
        "scanned_at": "2026-09-18T07:56:37Z",
        "final_url": "https://brook-travels.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://brook-travels.com/",
                "from": "http://brook-travels.com/",
                "status": 307
            }
        ],
        "ip": "172.67.214.137",
        "ips": [
            "172.67.214.137"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "e364eaccd4abcdd8334e2ec8a06e4eb9c4395674226becadac74eff221b767c5",
        "script_hashes": [
            "186af7895e9e9866016a6c7d0c14773bdb57a84131ec8dc179ad00c29261d416",
            "f5c0d7df3136feeaccc8d3a35b4e1e1f6740364fed66d7e5a7e5473adf7ae997",
            "7287415f1722a1f1bec115343804dd3fa9edb7aaf615c18dd97e7fc5963d7ca8",
            "6974c99b4065682ccc547b516eb5c79dd91849622b204fee9ac4543a21a2d377",
            "00fd6d6e785a245fe3bb77e4e994bbd02f829731baf886ddbed4c1554d738e7c",
            "00c9e8f1f5e39c8cf3f1f1f0f933c3b9a44483bf8b42162e11634a55a3594316",
            "bf84c654783f6f7197eb5d3d7b6a25beff0f636fdf2254bf2b119f84eff2f5c1",
            "dd2210f66003c7d35be6a10eead90ff0e052b48bdc23aef65de4bb1ad117ad45"
        ],
        "globals": [
            "__VUE_INSTANCE_SETTERS__",
            "__VUE_SSR_SETTERS__",
            "__buildAssetsURL",
            "__publicAssetsURL",
            "$fetch",
            "global",
            "__unctx__",
            "__unctx_async_handlers__",
            "__VUE__",
            "useNuxtApp"
        ],
        "cookies": [
            "surfer_uuid"
        ],
        "tls": {
            "san": [
                "brook-travels.com",
                "*.brook-travels.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "brook-travels.com",
            "protocol": "QUIC",
            "valid_to": "2026-11-27T02:16:47Z",
            "valid_from": "2026-08-29T01:19:26Z"
        },
        "domain_age_days": 266,
        "apex_age_days": 266,
        "tls_age_days": 20,
        "tls_valid_days": 90,
        "requests": 13,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 93,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T14:34:48Z",
        "uuid": "2e79c09a-0e8b-45b3-905a-f1518e1dd03f",
        "scanned_at": "2026-10-23T14:32:59Z",
        "final_url": "https://brook-travels.com/",
        "status": 200,
        "history": [
            {
                "url": "https://brook-travels.com/",
                "status": 200
            }
        ],
        "dom_hash": "6f581d7a067e4f4d9088edf3075d62ff1b2167feb916c0b5981aeb51a3f34d74",
        "doc_hash": "be6e469712e855d132ef70a1d9d894930b364d318d777f81e98509119953b185",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "brook-travels.com",
                "type": "A",
                "value": "172.67.214.137"
            },
            {
                "name": "brook-travels.com",
                "type": "A",
                "value": "104.21.75.53"
            },
            {
                "name": "brook-travels.com",
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:d689"
            },
            {
                "name": "brook-travels.com",
                "type": "AAAA",
                "value": "2606:4700:3035::6815:4b35"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.214.137",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "Porkbun LLC",
            "created": "2025-12-26T00:51:05Z",
            "updated": "2026-01-04T12:35:24Z",
            "expires": "2026-12-26T00:51:05Z",
            "nameservers": [
                "connie.ns.cloudflare.com",
                "mark.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T15:02:39Z",
        "analysis_at": "2026-10-23T14:36:36Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 16,
            "suspicious": 2,
            "undetected": 31
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "SafeToOpen": "phishing",
            "ADMINUSLabs": "malicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2025-12-26T00:00:00Z",
        "updated": "2026-01-04T00:00:00Z",
        "first_seen": "2025-12-26T01:32:55Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3034::ac43:d689"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "mark.ns.cloudflare.com"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "connie.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "connie.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.75.53"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3035::6815:4b35"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.214.137"
            }
        ],
        "dns_at": "2026-10-23T14:37:10Z",
        "jarm": "27d40d40d00040d1dc27d40d27d40d5fb4c89fe3813d172ffb53f84a68f750",
        "cert": {
            "san": [
                "brook-travels.com",
                "*.brook-travels.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "6f9e28781a184fd313ff870972c8e26e",
            "sha256": "6d69e3b48e5832b59d778c6a2a9dc6aa3643621abc3f8466958595f97bdf144c",
            "subject": "brook-travels.com",
            "valid_to": "2026-11-27T02:16:47Z",
            "valid_from": "2026-08-29T01:19:26Z"
        },
        "rdap": {
            "status": [
                "delete prohibited",
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2026-12-26T00:51:05Z",
                "last changed": "2025-12-26T00:51:05Z",
                "registration": "2025-12-26T00:51:05Z",
                "registrar expiration": "2026-12-26T00:51:05Z",
                "last update of RDAP database": "2025-12-26T00:51:05Z"
            },
            "registrar": "Porkbun LLC",
            "registrar_iana_id": "1861"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T14:35:07Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "brook-travels.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-23T14:31:16Z",
            "first": "2026-10-23T14:31:16Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 3093
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true
        },
        "social_tags": {
            "themeColor": "#ffffff"
        },
        "trackers": {
            "requests": 11
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 1,
                "tls": 37,
                "wait": 270,
                "connect": 7,
                "download": 0
            },
            "response_ms": 315
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256",
            "protocol": "TLSv1.2",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 4141,
            "co2_grams": 0.0002,
            "cleaner_than": 91
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.193.130",
                    "host": "mark.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.32.247",
                    "host": "connie.ns.cloudflare.com"
                }
            ],
            "zone": "brook-travels.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "surfer_uuid"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3035::6815:4b35",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "brook-travels.com"
        },
        "dns": {
            "A": [
                "104.21.75.53",
                "172.67.214.137"
            ],
            "NS": [
                "connie.ns.cloudflare.com",
                "mark.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"connie.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2415645715, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3034::ac43:d689",
                "2606:4700:3035::6815:4b35"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3034::ac43:d689",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://brook-travels.com"
            ]
        },
        "whois": {
            "registrar": "Porkbun LLC",
            "created": "2025-12-26T00:51:05Z",
            "updated": "2026-01-04T12:35:24Z",
            "expires": "2026-12-26T00:51:05Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "connie.ns.cloudflare.com",
                "mark.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```