bookingcomdubaithiingstoodo[.]webflow[.]io

Analysis of bookingcomdubaithiingstoodo.webflow.io indicates that the domain was created on June 12, 2026 and is hosted on the Webflow platform. DNS resolution points to the address 172.64.151.8, an IP range commonly associated with Webflow's content delivery infrastructure. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, which classifies it as a generic phishing source.

VirusTotal scans show that 2 of 91 security vendors have flagged the domain, reinforcing the suspicion of malicious activity despite the majority of scanners reporting no detection. The limited evidence set does not include a page title, SSL certificate details, or HTTP response codes, and no additional threat intelligence such as OTX tags or brand imitation has been reported. Consequently, the observable indicators—recent creation date, Webflow registration, blocklist presence, PhishDestroy block, and the modest VirusTotal detection rate—support a conclusion that the domain is actively being used for phishing attempts.

Defenders should add the domain to inbound and outbound filtering rules, monitor DNS queries for the associated IP address, and consider broader network-level blocking of Webflow-hosted subdomains that exhibit similar creation patterns. Ongoing telemetry collection is advised to capture any future changes in detection scores or additional blocklist listings, which would further substantiate the elevated risk rating.