d2ggomp8h1as73d4vcm0[.]bookiinngdubaihotels[.]webflow[.]io

The domain d2ggomp8h1as73d4vcm0.bookiinngdubaihotels.webflow.io was registered on June 12, 2026 through the Webflow platform, which provides shared hosting for user‑generated sites. Infrastructure analysis shows the domain is currently listed on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing provider has observed malicious use. VirusTotal reports that the domain has been examined by 91 scanning engines; none of the engines returned a detection at the time of the scan. While the absence of detections does not constitute evidence of benign intent, it confirms that the payloads or URLs observed so far have not triggered known signatures.

No public IP address, SSL certificate, HTTP response code, or page title has been disclosed in the available intelligence, and Safe Browsing, Open Threat Exchange, and other reputation services have not published additional data. Consequently, the full technical footprint of the site—including hosting location, certificate details, and content characteristics—remains unknown. Defenders should treat the domain as a potential phishing vector pending further investigation.

Recommended actions include adding the domain to internal blocklists, monitoring DNS queries for the sub‑domain, and configuring web filtering to deny HTTP/HTTPS traffic to the host. Continuous re‑scanning with multiple engines and periodic checks of blocklist feeds are advised to capture any future changes in detection status. Logging any attempted user interactions with the domain will provide additional indicators that can be correlated with broader threat intel.