bookingcomdubaiihotells[.]webflow[.]io

The domain bookingcomdubaiihotells.webflow.io was registered on June 12, 2026 through the Webflow hosting service and resolves to the IP address 172.64.151.8. Two of ninety‑one VirusTotal scanners have flagged the domain, indicating that at least a minority of security vendors have observed malicious characteristics. The domain is listed on a single external security blocklist and is actively blocked by the PhishDestroy filtering service, suggesting that threat‑intelligence feeds have identified it as part of a phishing campaign.

No public information is available regarding the site’s TLS certificate, HTTP response codes, or page title, and the content has not been publicly analyzed, leaving the exact impersonated brand or lure technique uncertain. Infrastructure analysis shows the domain is hosted on a shared Webflow environment, which is a common platform for rapid deployment of fraudulent pages. Defenders should add the domain to network‑level blocklists, ensure DNS filtering solutions include it in deny lists, and monitor outbound traffic for connections to 172.64.151.8.

Because the domain is newly created and already flagged by multiple security products, it should be treated as an elevated‑risk indicator. Continuous monitoring of related Webflow subdomains and correlation with user‑reported phishing attempts is recommended to capture any expansion of the campaign.