staging[.]bookingsccomdubaidesertsafari[.]webflow[.]io

The domain staging.bookingsccomdubaidesertsafari.webflow.io was created on June 12, 2026 and is hosted on the Webflow platform. DNS resolution points to the address 172.64.151.8, which is the sole IP associated with the domain in current passive DNS datasets. The domain appears on one security blocklist and has been actively blocked by the PhishDestroy service, indicating that at least one trusted mitigation provider has identified it as malicious. VirusTotal analysis shows that three out of ninety‑one scanned security vendors have flagged the domain, providing additional confirmation of its malicious reputation.

No further public intelligence such as Safe Browsing alerts, Open Threat Exchange entries, SSL certificate details, HTTP response codes, or page title information is presently available for this host. Consequently, the precise content served by the site, the targeted brand, and any credential‑ harvesting mechanics remain unknown pending deeper inspection. Analysts should treat the domain as an active generic phishing infrastructure and consider it a high‑confidence indicator of compromise.

Defensive actions include adding the domain to deny‑list controls, updating intrusion‑prevention signatures to block outbound connections to 172.64.151.8, and monitoring for any email or web‑traffic patterns that reference the domain or its sub‑components. Organizations employing Webflow‑based hosting should review their allowed‑list policies to ensure that only authorized project domains are reachable. Ongoing observation of the domain’s status on blocklists and VirusTotal should be maintained to detect any changes in detection ratios or additional vendor flags, which would further refine risk assessments.