beta[.]bookingcomsfdubaishopping[.]webflow[.]io

This domain, beta.bookingcomsfdubaishopping.webflow.io, was created on 12 June 2026 and is hosted on the Webflow platform. Passive DNS resolution shows it pointing to the IPv4 address 172.64.151.8, an address associated with Webflow’s content‑delivery infrastructure. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, indicating that at least one defensive feed has classified it as malicious.

VirusTotal analysis shows that 1 out of 91 scanning engines returned a positive detection, confirming that automated scanners have identified suspicious characteristics, though the low detection ratio suggests limited coverage or recent emergence. No additional intelligence such as page titles, SSL certificate details, or HTTP response codes is presently available, and the site content has not been publicly examined. Consequently, the exact phishing payload, targeted brand, or credential‑stealing mechanisms remain unknown.

Given the available evidence, defenders should treat the domain as a high‑confidence phishing indicator. Recommended actions include adding the domain and its resolving IP address to firewall and proxy blocklists, updating intrusion‑prevention signatures, and monitoring DNS queries for related subdomains. Continuous re‑evaluation is advised as further analysis, such as sandbox execution or content retrieval, may reveal the specific lure employed and any associated command‑and‑control infrastructure.