bookiingcomdubaiae[.]webflow[.]io

The domain bookiingcomdubaiae.webflow.io was registered on June 12, 2026 and is hosted on the Webflow platform. DNS resolution returns the address 172.64.151.8, indicating that the site is served from a shared Webflow infrastructure. The domain currently appears on a single security blocklist; PhishDestroy has listed it as malicious, confirming that at least one external sinkhole has observed abusive activity originating from the host. VirusTotal scans show that 3 of 91 security vendors have flagged the domain, providing independent corroboration of its malicious nature.

The threat is classified as generic phishing, and the risk level is elevated, meaning that the domain is actively being used in campaigns that could harvest credentials or personal data. No public evidence of SSL certificate details, HTTP status codes, page title, or Safe Browsing verdicts is presently available, and open‑source threat feeds such as OTX have not published additional indicators. Given the limited but consistent signals—blocklist inclusion, multiple vendor detections, and recent creation date—defenders should treat any traffic to this domain as hostile.

Recommended mitigation steps include adding the fully qualified domain name to internal blocklists, updating web‑gateway and DNS filtering policies to deny resolution, and monitoring for related indicators such as connections to IP 172.64.151.8. Incident response teams should also consider reviewing recent user logs for attempts to reach the domain and, if observed, initiate credential reset procedures. Continuous re‑evaluation is advised, as further intelligence (e.g., page content analysis or additional vendor detections) may emerge and alter the threat profile.