test[.]booking-com-dubaiuae-restaurants[.]webflow[.]io

Analysis of the domain test.booking-com-dubaiuae-restaurants.webflow.io indicates it is an active phishing infrastructure impersonating Booking.com, as suggested by the subdomain structure. The domain was registered on June 12, 2026, through Webflow, a platform commonly used for both legitimate and malicious hosting. As of July 29, 2026, the domain appears on one security blocklist, specifically PhishDestroy, which flags it as potentially malicious. No additional blocklist entries, Safe Browsing detections, or Open Threat Exchange (OTX) pulses were identified in the available data.

VirusTotal scans conducted by 91 vendors returned no current detections, though this absence does not confirm the domain's safety. The domain's hosting provider, Webflow, is known to allow rapid deployment of sites, which can facilitate phishing campaigns. No HTTP status codes, SSL certificate anomalies, or IP-based geolocation details were provided in the available intelligence. The exact content of the site remains unanalyzed, and no specific phishing kit or additional brand impersonation details are confirmed beyond the subdomain naming convention.

Defenders should treat this domain as suspicious due to its blocklist presence and impersonation of a well-known travel booking platform. Monitoring for additional detections, user reports, or changes in blocklist status is recommended. If internal logs or network traffic indicate interactions with this domain, further investigation into potential credential harvesting or fraudulent transactions is warranted. Organizations may consider preemptive blocking based on the current evidence, particularly for users accessing travel or hospitality-related services.