bookiingcom-dubaei[.]webflow[.]io

Analysis on July 29, 2026 confirms that the domain bookiingcom-dubaei.webflow.io is actively used for phishing. The site is hosted on the Webflow platform, as indicated by the registrar information stating registration through Webflow. DNS resolution points to the IPv4 address 172.64.151.8, which is part of the Fastly edge network commonly used for content delivery. The domain has been intercepted by the PhishDestroy mitigation service, which placed it on a phishing blocklist.

VirusTotal has recorded that six of ninety‑one scanning engines returned a malicious verdict, reinforcing the suspicion of abusive activity. Additionally, the domain appears on one external security blocklist, further corroborating its reputation as a threat vector. The available evidence does not reveal the specific landing page content, login form structure, or any SSL certificate details; these aspects remain unverified pending deeper content inspection. No Safe Browsing or Open Threat Exchange alerts are currently reported for this host, and no additional intelligence sources have published indicators beyond the listed blocklists.

Defenders should block all outbound and inbound traffic to bookiingcom-dubaei.webflow.io at the network perimeter, deny DNS resolution where possible, and add the IP address 172.64.151.8 to host‑based deny lists. Continuous monitoring of Webflow‑hosted subdomains for similar patterns is advised, as the platform can be leveraged to spin up new phishing sites rapidly. Organizations using email filtering should flag any messages that reference the domain or its sub‑resources, and security teams should update URL reputation feeds with the observed indicators to improve early detection.