booking-coom-duubai-fllight-tickets[.]webflow[.]io

The domain booking-coom-duubai-fllight-tickets.webflow.io was registered on June 12, 2026 through the Webflow platform and resolves to the IP address 172.64.151.8. As of the report date, July 29, 2026, the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal analysis shows that 17 of 91 security vendors have flagged the domain as malicious, indicating a moderate level of consensus among scanning engines.

The risk rating assigned to the infrastructure is elevated, and the operational status is listed as active, suggesting ongoing use in a campaign. The available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any observed traffic patterns, leaving the exact content of the hosted site unverified. No additional attribution such as ASN, country, or associated malware kit is present in the current dataset.

Defenders should prioritize adding the fully qualified domain name and its resolved IP address to outbound and inbound blocking policies, especially within email gateways and web filtering solutions. Continuous monitoring of the IP 172.64.151.8 for new associations or changes in reputation is advised, as the host may be leveraged for other malicious payloads. Given the confirmed detections by multiple vendors and the active blocklist entry, organizations are recommended to treat any communications referencing this domain as potentially fraudulent and to educate users about the likelihood of credential‑stealing or payment‑diversion attempts associated with counterfeit travel‑booking pages.