tls[.]bookingcompackages-dubai[.]webflow[.]io

The domain tls.bookingcompackages-dubai.webflow.io was registered on June 12, 2026 through the Webflow hosting platform. Within a month of creation it appeared on a single security blocklist, specifically PhishDestroy, which has classified it as a delivery‑related scam. VirusTotal reports that one out of ninety‑one scanned security vendors flagged the domain, indicating at least one detection signal but insufficient consensus to label it universally malicious.

The blocklist entry and the solitary vendor detection together raise the risk level to elevated, and the domain remains active as of the report date, July 29, 2026. No additional intelligence such as IP address, ASN, hosting country, SSL certificate details, HTTP response codes, Safe Browsing verdicts, or page‑title analysis is available in the current dataset. Consequently, defenders cannot corroborate the presence of typical command‑and‑control infrastructure or confirm whether the site serves malicious payloads beyond the delivery‑scam classification.

Given the limited but concrete evidence—recent registration, inclusion on PhishDestroy, and a single vendor flag—security teams should treat the domain as suspicious. Recommended actions include adding the domain to outbound and inbound deny lists, monitoring DNS queries for resolutions to the host, and configuring web gateways to block HTTP requests to the URL. Continuous re‑evaluation is advised, as additional detections or blocklist entries may emerge that could increase confidence in the malicious assessment.