booking-comaraab-dubai-packages[.]webflow[.]io

The domain booking-comaraab-dubai-packages.webflow.io was registered through Webflow on June 12, 2026. It resolves to the IP address 172.64.151.8, which is part of the Cloudflare network used by many Webflow‑hosted sites. VirusTotal has scanned the domain and 14 of 91 security vendors returned a positive detection, indicating a moderate level of malicious reputation. The domain is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service considers it malicious.

The threat type is identified as a delivery scam, suggesting that the site is likely used to lure victims with false delivery offers or tracking pages to harvest personal data or credentials. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or Safe Browsing status is available in the supplied data, leaving the content of the site unverified. Defenders should prioritize adding the domain and its associated IP address to existing URL filtering and DNS sink‑hole rules.

Monitoring of outbound traffic to the IP 172.64.151.8 for anomalous connections is advised, and any internal attempts to resolve or access the domain should be blocked. Given the active blocklist entry and the multi‑vendor detection on VirusTotal, the domain should be treated as high‑confidence malicious and included in threat‑intel sharing feeds. Continuous re‑evaluation is recommended if new indicators such as page content, SSL fingerprints, or additional blocklist listings emerge.