yvyuobooking-com-dubai-hotelss[.]webflow[.]io

This report examines the domain yvyuobooking-com-dubai-hotelss.webflow.io, identified as an elevated risk for generic phishing as of July 29, 2026. The domain was registered via Webflow and created on June 12, 2026. Its current DNS resolution points to the IP address 172.64.151.8. The site is presently active and has been flagged by PhishDestroy, a recognized security provider. Additionally, it appears on one documented security blocklist, indicating that at least one threat intelligence source has assessed this domain as malicious or suspicious.

VirusTotal analysis shows that 2 out of 91 security vendors currently detect this domain as a phishing threat, which, while a minority, is consistent with early detection of new or targeted phishing sites. The specific content, page title, targeted brands, or scam kit information have not yet been analyzed or disclosed. There is no data available regarding SSL configuration, HTTP status, or hosting country. The registration through Webflow and the relatively recent creation date may indicate automated or rapid deployment, which is a common characteristic in phishing infrastructure.

Defenders should consider this domain as actively malicious based on current evidence and take immediate steps to block communications to and from 172.64.151.8 within their networks. Security teams are advised to monitor for campaign indicators and update detection signatures. Further forensic analysis is recommended to determine the scope of activity and any potential user exposure, as threat classification is based on blocklists and vendor detections rather than direct content review. Immediate action is warranted until a more comprehensive assessment can be completed.