dashboard[.]booking-com-waedubai-hotels[.]webflow[.]io

The domain dashboard.booking-com-waedubai-hotels.webflow.io was created on 12 June 2026 and is registered through the Webflow platform. DNS resolution points to the single IPv4 address 172.64.151.8. The domain is listed on one public security blocklist and has been actively blocked by the PhishDestroy service, indicating that at least one sinkhole or filtering entity has taken mitigation steps. VirusTotal analysis shows that two of ninety‑one security vendors have flagged the domain, providing modest but notable detection evidence.

The threat classification supplied is generic phishing, and the risk level is elevated with the operational status marked as active. Concrete public intelligence on the web content, page title, or SSL certificate is not available, leaving the exact visual lure or credential‑capture mechanism unverified. The limited detection history combined with the recent registration date suggests a short‑lived infrastructure that may be leveraged for a targeted credential‑harvesting campaign against users of the Booking.com service, as implied by the domain’s naming pattern.

Defenders should add the IP address 172.64.151.8 to network‑level deny lists, enforce domain‑based blocking for the full FQDN, and monitor outbound DNS queries for similar Webflow‑hosted subdomains that incorporate brand‑related keywords. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is advised to capture any escalation in vendor detections. Organizations employing web‑filtering or secure web gateways should ensure the domain is classified as malicious to prevent end‑user exposure.