d4d60s1cpoos73dgu4s0[.]booking-com-dubai-flight-tickets-bookin[.]webflow[.]io

Analysis of the domain d4d60s1cpoos73dgu4s0.booking-com-dubai-flight-tickets-bookin.webflow.io indicates an active generic phishing threat under investigation as of July 29, 2026. The domain was registered on June 12, 2026, through Webflow, a platform commonly used for both legitimate and malicious web hosting. Infrastructure analysis reveals the domain resolves to the IP address 104.18.36.248, which is associated with a content delivery network, potentially obscuring the true origin of the hosting infrastructure.

At present, the domain appears on a single security blocklist, PhishDestroy, suggesting initial detection but limited widespread visibility among threat intelligence platforms. No detections were recorded among the 91 vendors that scanned the domain on VirusTotal, though the absence of flags does not confirm safety or legitimacy. The domain's content has not been fully analyzed, and no specific brand impersonation or scam category has been confirmed beyond its classification as a generic phishing threat.

Defenders are advised to monitor network traffic for connections to this domain and the associated IP address, particularly in environments where travel-related services or booking platforms are relevant. Given the domain's recent registration and limited detection footprint, further investigation is warranted to determine the scope and intent of the phishing campaign. Organizations should consider implementing temporary blocks or alerts for this domain while additional analysis is conducted.