secure[.]booking-com-waedubai-hotels[.]webflow[.]io

Analysis of secure.booking-com-waedubai-hotels.webflow.io shows a recently registered domain created on June 12, 2026. The domain resolves to the IP address 172.64.151.8 and is hosted on the Webflow platform, as indicated by the registrar information. VirusTotal records reveal that the domain has been scanned by 91 security vendors, none of which flagged it as malicious at the time of the scan; this absence of detections does not constitute a safety guarantee.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, suggesting that threat‑intel feeds have identified it as associated with credential phishing activity. No public information on SSL certificate details, HTTP response codes, page title, or additional reputation scores is available, leaving those aspects of the infrastructure unverified. Given the combination of a brand‑related subdomain pattern, recent registration, hosting on a popular website‑builder service, and inclusion on a phishing‑focused blocklist, defenders should treat the domain as suspicious.

Recommended actions include adding the domain to local deny lists, monitoring DNS queries for the IP 172.64.151.8, and employing URL filtering solutions that reference the PhishDestroy blocklist. Continuous re‑evaluation is advised as additional telemetry becomes available.