booking-com-dubaii-flight-tick-dd[.]webflow[.]io

The domain booking-com-dubaii-flight-tick-dd.webflow.io was created on 12 June 2026 and is currently classified as an elevated‑risk generic phishing site. Infrastructure analysis shows the domain resolves to the IPv4 address 172.64.151.8, which is hosted on the Webflow platform, indicating the site was registered through Webflow’s automated provisioning service. VirusTotal scans have recorded detections from 2 of 91 security vendors, confirming that at least a small subset of anti‑malware engines recognise the domain as malicious.

The domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing the consensus that it should be treated as hostile. No additional public intelligence such as page titles, SSL certificate details, or HTTP response codes is presently available, so the exact nature of the content hosted at the URL remains unverified. However, the combination of recent creation, dedicated phishing classification, confirmed IP resolution, vendor detections, and active blocklist entries provides sufficient evidence for defensive operators to take precautionary action.

Recommended mitigations include adding the domain to network‑level deny lists, updating DNS filtering policies, and monitoring for any outbound connections to the associated IP address. Continuous re‑evaluation is advised, as future scans may reveal additional detections or changes to the hosting environment.