booking-com-dubai-contact-number[.]webflow[.]io

The domain booking-com-dubai-contact-number.webflow.io is currently active and classified as a generic phishing site. Infrastructure analysis shows the domain resolves to the IPv4 address 172.64.151.8, which belongs to the Webflow hosting service. Registration records indicate the domain was created through Webflow, a legitimate website‑building platform, suggesting the adversary leveraged a trusted provider to obscure malicious activity.

VirusTotal scans have returned detections from 10 of 91 security vendors, confirming that a subset of AV engines recognize the domain as malicious. The domain is listed on one public security blocklist and has been blocked by the PhishDestroy filtering service, providing additional evidence of its abusive nature. No public Safe Browsing, OTX, or SSL certificate details are available in the current intelligence set, and page‑title information has not been disclosed.

The limited evidence points to a phishing campaign that likely uses the domain to lure victims by referencing travel‑related services, but the exact lure content remains unverified. Defenders should treat the domain as hostile: add the FQDN to network‑level blocklists, monitor DNS queries for the associated IP address, and consider employing URL filtering rules that reference the known blocklist entry. Continuous re‑evaluation is advised, as additional detections or contextual information may emerge from future scans or threat‑intel feeds.