booking-com-dubaipackages[.]webflow[.]io

As of July 29, 2026, the domain booking-com-dubaipackages.webflow.io is flagged as a delivery scam domain with an elevated risk level and is currently active. This domain is registered through Webflow and was created on June 12, 2026. The domain appears on one security blocklist and is blocked by PhishDestroy, indicating that it is recognized by some security vendors as a potential threat. The domain resolves to the IP address 104.18.36.248, which may be further investigated to determine the hosting infrastructure and potential links to other malicious activities.

Analysis indicates that the domain is likely part of a campaign impersonating Booking.com to deceive users into providing sensitive information or making unauthorized payments. While the exact content of the site has not been analyzed, the domain name suggests it may be targeting users who are planning travel packages or booking accommodations in Dubai. Defenders are advised to block this domain and monitor network traffic for any attempts to access it.

Additionally, users should be educated to verify the authenticity of booking websites and avoid clicking on suspicious links. The domain's presence on a security blocklist and its blocking by PhishDestroy provide strong indicators that it should be treated with caution. Further investigation into the hosting IP address and any associated subdomains or URLs may help in identifying the scope of the scam and taking necessary countermeasures.