booking-com-dubai-packageess[.]webflow[.]io

booking-com-dubai-packageess.webflow.io is currently flagged as an active delivery‑scam infrastructure with an elevated risk rating. The domain was registered through the Webflow platform on 12 June 2026 and resolves to the IP address 104.18.36.248, which is associated with the Webflow hosting service. The domain appears on a single security blocklist and is listed as blocked by PhishDestroy, indicating that at least one defensive feed has identified it as malicious.

VirusTotal analysis shows that 2 of 91 scanned security vendors have marked the domain as malicious, demonstrating limited but non‑trivial detection across the ecosystem. No additional intelligence such as SSL certificate details, HTTP response codes, or page title information is presently available, leaving the content of the hosted site unverified. The observed evidence suggests a newly created infrastructure that leverages a reputable hosting provider to gain credibility while delivering a delivery‑related scam payload.

Defenders should consider adding the domain to deny‑list rules, monitor DNS queries for the associated IP, and enforce URL filtering for the domain. Given the limited detection coverage, organizations relying on reputation‑based controls should treat the domain as suspicious until further analysis confirms its behavior. Continuous observation of blocklist updates and re‑scanning through multi‑vendor services is recommended to capture any evolution in the threat profile.