help[.]bookingcomrestaurants-dubai[.]webflow[.]io

Analysis of the domain help.bookingcomrestaurants-dubai.webflow.io indicates it is an active phishing site targeting users of a booking-related service. The domain was registered on June 12, 2026, through Webflow, a platform commonly used for both legitimate and malicious websites. As of July 29, 2026, the domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal reports that 3 out of 91 security vendors flag this domain as malicious, suggesting moderate detection but not universal recognition.

The domain resolves to the IP address 172.64.151.8, which may be part of a content delivery network or shared hosting environment, though the autonomous system and geolocation details are not provided in available intelligence. No specific information about the page title, brand target, or phishing kit is available in the current data. The exact content and functionality of the site remain unconfirmed, as the domain has not been fully analyzed for visual or interactive elements. Defenders should treat this domain as an elevated-risk threat due to its presence on a security blocklist and detection by multiple vendors.

Network-level blocking is recommended, particularly for organizations in sectors related to travel, hospitality, or online booking services. Further investigation into the IP address and associated domains may reveal additional infrastructure linked to this campaign. If user reports or additional telemetry become available, they should be cross-referenced to determine the scope and intent of the phishing operation.