booking-com-duubbai-hotels[.]webflow[.]io

This domain, booking-com-duubbai-hotels.webflow.io, was registered on June 12, 2026, through Webflow and is currently flagged as an active phishing threat targeting Booking.com users. Infrastructure analysis reveals it resolves to IP address 172.64.151.8, with no additional hosting or ASN details provided. The domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal scans indicate that 2 of 91 security vendors detect this domain as malicious, though the specific detection rules or signatures are not disclosed in the available data.

The domain's naming convention, combining 'booking-com' and 'duubbai' (a likely misspelling of 'Dubai'), suggests an attempt to impersonate Booking.com, a known target for credential harvesting and payment fraud. However, the exact content of the phishing page remains unanalyzed, and no page title, brand confirmation, or phishing kit details are available in the provided intelligence. Defenders should treat this domain as elevated risk, particularly for users searching for hotel bookings in Dubai or related regions.

Recommended actions include blocking the domain at the DNS or proxy level, monitoring for connections to 172.64.151.8, and reviewing logs for any internal access attempts. If additional context is required, defenders may conduct a controlled analysis of the domain's content, though caution is advised due to the active phishing classification. No SSL or HTTP status details are provided, so further investigation into encryption or server behavior is warranted if deeper assessment is necessary.