booking-com-dubai-flights-tickets[.]webflow[.]io

The domain booking-com-dubai-flights-tickets.webflow.io was registered on June 12, 2026 through the Webflow platform, a service that provides hosted web‑site creation. DNS resolution points to the IP address 172.64.151.8, which is associated with the hosting infrastructure used by Webflow. The domain is currently listed as active and is classified with an elevated risk level. It has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, indicating that at least one external deflection system has taken action against it.

VirusTotal analysis shows that 2 of 91 submitted security vendors have flagged the domain, confirming that some detection engines consider it malicious, though the majority have not raised a detection. The limited detection count suggests that the phishing payload may be recent or that detection signatures are not yet widespread. No public SSL certificate details, HTTP status codes, or page‑title information are available at this time, leaving the exact content and delivery mechanism of the site unverified.

Analysts should treat the domain as a probable phishing vector targeting users interested in travel bookings, given the lexical components of the name. Defensive measures should include adding the domain to local deny lists, monitoring DNS queries for the associated IP, and ensuring that web‑filtering solutions reference the known blocklist entries. Continuous re‑evaluation is recommended, as additional security vendor detections or changes in blocklist status may provide further insight into the campaign’s scope and tactics.