d2ggp318h1as73d5an40[.]booking-com-dubaipackages[.]webflow[.]io

The domain d2ggp318h1as73d5an40.booking-com-dubaipackages.webflow.io was registered on June 12, 2026 through the Webflow registrar. It resolves to the IP address 172.64.151.8, which is owned by the Webflow hosting infrastructure. The domain has been identified as part of a delivery‑related scam campaign and is currently listed on a single security blocklist.

PhishDestroy has added the domain to its blocklist, indicating that the site is being used for malicious activity. A VirusTotal scan involving 91 antivirus and URL‑reputation vendors returned no detections; however, the absence of a detection does not imply safety, especially given the domain’s inclusion on a blocklist and its classification as a delivery scam. No additional intelligence such as Safe Browsing verdicts, Open Threat Exchange entries, SSL certificate details, HTTP status codes, or page title information is presently available.

Consequently, the exact content and tactics employed by the site remain unknown, and analysts should treat the domain as potentially harmful. Defenders are advised to block the domain at network perimeter devices, update URL filtering policies, and monitor for any traffic to the associated IP address. Continuous re‑evaluation is recommended as further telemetry becomes available, particularly if the site begins to appear in additional threat feeds or exhibits changes in hosting or certificate attributes.