wigyqbookinggcodubaii-flight-tickets[.]webflow[.]io

The domain wigyqbookinggcodubaii-flight-tickets.webflow.io was registered on 12 June 2026 through the Webflow platform. It resolves to the IPv4 address 172.64.151.8, an address associated with Webflow's hosting infrastructure. Reputation checks show the domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed. VirusTotal analysis reports that two of ninety‑one scanning engines have flagged the domain, indicating a low but non‑zero detection rate.

No additional intelligence such as SSL certificate details, HTTP response codes, page title, or content analysis is presently available, limiting the depth of the current assessment. The observed indicators suggest the site is being leveraged for a generic phishing campaign, consistent with its classification as a generic phishing threat. Because the domain is hosted on a legitimate website‑builder service, traditional URL filtering may miss it unless the hosting provider’s IP range is explicitly denied.

Defenders should consider adding the IP 172.64.151.8 to network‑level deny lists, enforce blocklist entries that include this domain, and monitor for any traffic to the Webflow host that matches the creation timestamp. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is recommended to capture any changes in detection status. Until further forensic evidence becomes available, the domain should be treated as malicious and blocked at the perimeter, DNS, and endpoint layers.