email[.]bookingcomdesertsafari-dubai[.]webflow[.]io

This domain, email.bookingcomdesertsafari-dubai.webflow.io, is flagged as an active generic phishing threat with an elevated risk level as of July 29, 2026. VirusTotal reports 1 of 91 security vendors flagging this domain, and it appears on 1 security blocklist, specifically PhishDestroy. The domain was created on June 12, 2026, and resolves to IP address 172.64.151.8. It is registered through Webflow.

The low detection rate (1/91) suggests that the domain may be relatively new or has not been widely circulated in threat intelligence feeds, but the single blocklist entry indicates at least one security vendor has confirmed malicious activity. No additional intelligence is available regarding the page title, site content, targeted brand, or associated malware kits. Defenders should treat this domain as suspicious and block access at the network level. Given the generic phishing classification and the use of a subdomain mimicking a booking or travel service, users may be lured into credential harvesting or data theft schemes.

Organizations should monitor for any outbound connections to this domain, inspect email traffic referencing it, and educate users to avoid interacting with unsolicited links. Regular re-scanning via VirusTotal and other threat intelligence platforms is recommended to track any increase in detection rates or blocklist appearances. The IP address 172.64.151.8 should be added to watchlists for further analysis of associated domains.