learn[.]bookingdubai--com[.]webflow[.]io

On July 29, 2026 the domain learn.bookingdubai--com.webflow.io was observed in an active generic phishing campaign and assigned an elevated risk rating. The domain was created on June 12, 2026 and is registered through the Webflow platform. DNS resolution points to the address 172.64.151.8, which is part of the Webflow hosting infrastructure. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service.

VirusTotal analysis reports that one of ninety‑one scanning engines flagged the domain, providing a minimal but non‑zero detection signal. The limited detection footprint may indicate recent deployment or evasion of broader detection mechanisms. No public information on SSL certificates, HTTP status codes, or page title is currently available, leaving the content of the site unverified.

Defenders should treat the domain as malicious, enforce network‑level blocks to the associated IP address, and add the domain to local deny lists. Ongoing monitoring of the IP address and periodic re‑scanning with VirusTotal or similar services are recommended to capture any changes in detection rates. The scarcity of open‑source intelligence reinforces the need for proactive defensive controls while further investigation proceeds.