boooking-ccom-duubai[.]webflow[.]io

The domain boooking-ccom-duubai.webflow.io was registered through Webflow on June 12, 2026 and is currently active as of the report date July 29, 2026. DNS resolution points to the IP address 172.64.151.8, which belongs to the hosting infrastructure used by Webflow. The domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy filtering service, indicating that security operators have identified it as malicious.

A VirusTotal scan shows that 2 of 91 security vendors have flagged the domain, providing early evidence of suspicious behavior. No public page title, brand target, or detailed content analysis is available, so the precise phishing lure or credential‑harvesting technique employed by the site cannot be confirmed at this time. The lack of additional metadata such as SSL certificate details, HTTP response codes, or Safe Browsing status further limits the current visibility into the site’s operational characteristics.

Given the recent creation date, the use of a reputable SaaS hosting platform, and the presence of detections across multiple vendors, the domain is assigned an elevated risk rating. Defensive recommendations include adding the domain and its resolved IP address to DNS and network deny lists, monitoring outbound connections for any attempts to reach 172.64.151.8, and re‑scanning the domain on VirusTotal and other reputation services as new data becomes available. Continuous observation of blocklist updates and threat‑intel feeds is advised to capture any emerging indicators of compromise related to this infrastructure.