booking-com-duubai-packaaages[.]webflow[.]io

Analysis of the domain booking-com-duubai-packaaages.webflow.io as of July 29, 2026, indicates evidence of phishing-related activity. The domain was registered via Webflow and created on June 12, 2026, suggesting recent activation within the last two months. Current DNS records show it resolves to IP address 172.64.151.8. Security intelligence sources confirm the domain is actively flagged: 2 out of 91 security vendors on VirusTotal currently detect the domain for malicious behavior, and it appears on at least one security blocklist. Specifically, the domain is blocked by PhishDestroy, a platform specialized in identifying and mitigating phishing infrastructures. No further information is available regarding the domain’s SSL configuration, HTTP status, or the specific content hosted, and no brand or visual content analysis has been performed.

While the domain's full operational details remain unconfirmed, the presence on a public blocklist and detection by multiple independent security engines significantly elevates the risk profile. Detection by reputable tools aligns with established indicators of phishing infrastructure use, particularly when the domain is newly registered and hosted on a widely used platform such as Webflow.

Defenders are advised to immediately block booking-com-duubai-packaaages.webflow.io and monitor for any user access attempts. Any email, link, or network communication referencing this domain should be considered suspicious until a comprehensive review can be completed. Further investigation is warranted if internal traffic is detected. Security teams should remain alert for related domains and monitor threat intelligence feeds for emerging activity.