store[.]bookkingcoom--dubai[.]webflow[.]io

The domain store.bookkingcoom--dubai.webflow.io was registered on June 12, 2026 through the Webflow hosting platform and resolves to the IP address 172.64.151.8. VirusTotal analysis shows that three out of ninety‑one security vendors have flagged the domain, indicating a modest but non‑trivial detection rate. The domain is currently listed on a single external blocklist and has been explicitly blocked by the PhishDestroy service, confirming its classification as a phishing resource.

No additional infrastructure details such as SSL certificate information, HTTP response codes, or page title metadata are available in the provided intelligence, and no Safe Browsing, OTX, or further vendor scores have been reported. Consequently, the exact content and target of the phishing campaign remain uncertain, though the generic phishing label suggests it is being used to harvest credentials or personal data. Defenders should immediately add the domain and its associated IP address to network and endpoint blocklists, enforce URL filtering policies to deny access, and monitor outbound traffic for connections to 172.64.151.8.

Continuous re‑scanning with VirusTotal and other multi‑engine services is advisable to track changes in detection rates. Analysts should also watch for any new listings on additional blocklists or emerging threat feeds that reference this domain, as further evidence may clarify the scope of the campaign.