bookingcommdubaipackages[.]webflow[.]io

The domain bookingcommdubaipackages.webflow.io was registered through Webflow and first observed on June 12, 2026. Infrastructure analysis shows the hostname resolves to IP address 172.64.151.8. The domain is presently listed on a single security blocklist and has been actively blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing feed considers it malicious.

VirusTotal scans report that 2 of 91 security vendors have flagged the domain, reinforcing the suspicion of abuse. The campaign is classified as a delivery scam and is assigned an elevated risk level; its status remains active as of the report date, July 29, 2026. Concrete evidence therefore confirms the domain’s presence in threat intelligence sources, but the public web content has not yet been examined, leaving details such as page title, SSL configuration, HTTP response codes, or any brand impersonation unverified.

Consequently, defenders should treat the domain as hostile: network perimeter controls should block traffic to 172.64.151.8, URL filtering policies ought to deny any request to bookingcommdubaipackages.webflow.io, and security teams should add the domain to internal blocklists. Ongoing monitoring for new detections, additional blocklist listings, or changes in the hosting fingerprint is advised to capture any evolution of the campaign.