billing[.]arabbooking-com-dubai-desert-safari[.]webflow[.]io

Analysis of the domain billing.arabbooking-com-dubai-desert-safari.webflow.io indicates an active generic phishing threat with elevated risk. The domain was registered on June 12, 2026, through Webflow, a platform commonly used for both legitimate and malicious hosting. Infrastructure resolves to IP address 172.64.151.8, which may be part of a content delivery or hosting network. As of the latest scans, two out of ninety-one security vendors on VirusTotal have flagged this domain, suggesting early detection but not yet widespread recognition.

The domain appears on at least one security blocklist, reinforcing its classification as malicious. No specific brand or service is confirmed as the target based on available data, and the exact content of the site remains unanalyzed. The domain name incorporates terms related to travel or booking services, which may indicate an attempt to deceive users seeking legitimate tourism or payment portals.

However, without further evidence, this remains speculative. Defenders should treat this domain as a confirmed phishing resource and block access at the network level. Monitoring for additional detections or changes in hosting infrastructure is recommended, as the domain remains active as of July 29, 2026.