bookingcom-dubais.webflow.io
“404 - Page not found”
bookingcom-dubais.webflow.io — Konten tidak tersedia (HTTP 404). Peniruan identitas merek: Unknown; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 8/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Fortinet); PhishDestroy score 74/100. Registrar: Webflow.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
The domain bookingcom-dubais.webflow.io is currently flagged as an active generic phishing site with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IP address 172.64.151.8, a host commonly associated with Webflow‑provided web‑hosting services. Registration data indicates the domain was provisioned through Webflow, confirming the use of a legitimate SaaS platform to obtain a publicly trusted TLS certificate and a stable hosting environment. The domain appears on a single security blocklist and is explicitly listed as blocked by the PhishDestroy feed, providing an early indicator of malicious intent.
VirusTotal scans have returned eight positive detections out of ninety‑one submitted security vendors, reinforcing the suspicion that the site is being used for phishing campaigns. No additional intelligence such as page titles, brand impersonation details, or sandbox analysis has been released, leaving the exact content and lure mechanisms unverified. Consequently, defenders should treat any traffic to this domain as hostile.
Recommended actions include adding the domain to outbound deny lists, configuring web proxies to block HTTP/HTTPS requests, and monitoring DNS queries for the associated IP address 172.64.151.8 for signs of internal resolution. Incident response teams should also correlate any user‑reported credential submissions or login attempts with this domain to identify potential compromise. Continuous re‑evaluation is advised, as further threat intelligence—such as page content or additional blocklist listings—may emerge and adjust the operational profile of the campaign.
Forensic History & Detection Timeline
-
Domain Status Transition Jul 29, 2026 · 07:00 UTCDomain state transitioned from alive to dead.
-
Threat First Observed Jul 29, 2026 · 06:41 UTCDomain ingestion complete. Initial state is marked as unknown pointing to IP
172.64.151.8.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Evasion analysis
Cloaking & traffic-distribution check
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
- Server header seen by scanner
cloudflare
Scanner note: dead_http: raw=http_404; http=404; via=https_proxy; server=cloudflare
Teknologi · 2 identified
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of bookingcom-dubais.webflow.io · checked Jul 29, 2026
Laporan komunitas
Dilaporkan oleh 1 anggota komunitas; pertama terlihat 12/06/2026
- Laporan tersimpan
- 1
- URL unik yang dilaporkan
- 1
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive