bookingdubaiexperience[.]webflow[.]io

The domain bookingdubaiexperience.webflow.io is currently active and classified as a generic phishing site with an elevated risk rating. Infrastructure analysis shows the domain resolves to the IPv4 address 172.64.151.8 and is hosted on the Webflow platform, indicating the attacker leveraged a legitimate website‑building service to obtain a trusted TLS certificate and reduce friction for victims. VirusTotal scans report that four of ninety‑one security engines flagged the domain, providing early evidence of malicious behavior.

The domain is listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing the likelihood of phishing activity. No additional intelligence such as SSL details, HTTP response codes, page title, or Safe Browsing verdicts is presently available, leaving those vectors unverified.

Defenders should immediately add the domain to DNS and proxy blocklists, enforce outbound filtering for connections to 172.64.151.8, and monitor for any credential‑submission attempts that reference the domain. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators such as malicious payload delivery or credential harvesting mechanisms.