track[.]booking-comaeu-dubai-packages[.]webflow[.]io

The domain track.booking-comaeu-dubai-packages.webflow.io was registered on June 12, 2026 through the Webflow hosting platform. Within a month of its creation it has been observed on a security blocklist and is actively blocked by PhishDestroy, indicating that threat‑intelligence feeds have already classified it as malicious. VirusTotal analysis shows that nine out of ninety‑one scanning engines returned a detection, reinforcing the suspicion that the site hosts or distributes illicit content. The threat type is listed as a delivery scam, and the risk rating is elevated, with the infrastructure currently marked as active.

The presence of the domain on a blocklist and the multiple vendor detections suggest that it is likely being used to lure victims into providing personal or payment information under the pretense of a package delivery service. The use of a Webflow sub‑domain provides a legitimate‑looking TLS certificate and may bypass naïve URL filters that focus on high‑profile brand domains. No further technical details such as IP address, ASN, or SSL fingerprint have been disclosed in the available intelligence, leaving the exact hosting location and any associated command‑and‑control infrastructure unverified. Defenders should add the full host name to their deny‑list and ensure that any outbound traffic to the domain is blocked at the network perimeter.

Email security gateways should be updated to flag messages that reference the domain or contain similar delivery‑related lure language. Continuous monitoring of the domain’s reputation on VirusTotal and other threat‑intel platforms is advised, as additional detections may emerge. Incident response teams should treat any interaction with the site as potentially compromising and advise users to avoid clicking links that resolve to this Webflow address.