hjrzrcheap-hotel-booking-dubai[.]webflow[.]io

This domain, hjrzrcheap-hotel-booking-dubai.webflow.io, was registered on June 12, 2026 through the Webflow platform. The hostname resolves to the address 172.64.151.8, an IP owned by the Webflow hosting infrastructure. Within a day of its appearance the domain was listed on a security blocklist and is currently flagged by PhishDestroy, indicating that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal analysis shows that 2 of 91 scanning engines returned a positive result, confirming that a minority of detection tools consider the domain suspicious. The threat classification supplied is generic phishing, and the risk rating is elevated with an active status, suggesting ongoing exploitation.

Publicly available telemetry does not include SSL certificate details, HTTP response codes, or page‑title metadata, leaving the content of the site unverified. No additional blocklists or reputation services beyond the single entry have been observed, and no attribution to a broader campaign has been established. The limited detection footprint—only two vendors flagging the domain—means that many security products may not yet block it, increasing exposure for users who encounter the URL in email or messaging.

Defenders should prioritize adding the hostname to local deny lists and ensure that network perimeter filters reference the PhishDestroy feed. Endpoint security solutions that incorporate VirusTotal or similar multi‑engine scans should be configured to trigger alerts on any detection associated with this domain. Continuous monitoring of the IP address 172.64.151.8 for new malicious resolutions is advised, as well as periodic re‑query of reputation services to capture any future changes in classification. Until comprehensive content analysis is performed, the domain should be treated as unsafe.