affiliates[.]bookingsccomdubaidesertsafari[.]webflow[.]io

This domain is flagged as part of an elevated‑risk generic phishing operation. The sub‑domain affiliates.bookingsccomdubaidesertsafari.webflow.io was created on 12 June 2026 and is hosted on the Webflow platform, as indicated by the registrar information. Network resolution points to the address 172.64.151.8, which is owned by Cloudflare’s edge network and is commonly used by Webflow‑hosted sites. The domain appears on one public blocklist and is actively blocked by the PhishDestroy feed, confirming that threat‑intelligence providers have observed malicious use.

VirusTotal analysis shows that three of ninety‑one scanning engines returned a positive classification, providing independent confirmation of suspicious activity. No additional public intelligence such as OTX entries, Safe Browsing alerts, or SSL reputation data is currently available for this host. The page title and content have not been publicly disclosed, so the exact lure or credential‑collection technique employed by the site remains unknown.

Given the recent creation date, the association with a reputable hosting service, and the presence on a blocklist, defenders should treat the domain as hostile. Recommended mitigations include adding the full host to network‑level deny lists, updating endpoint web‑filtering policies to block the domain, and monitoring DNS queries for the associated IP address. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators such as HTTP response codes, TLS certificate details, or active phishing kits.