booking-com-dubai-tiiickets[.]webflow[.]io

The domain booking-com-dubai-tiiickets.webflow.io was registered on June 12, 2026 and resolves to the IP address 172.64.151.8. It is hosted on the Webflow platform, a legitimate website‑building service that is frequently abused for malicious campaigns. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed.

VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain, indicating that at least a minority of scanners have identified malicious characteristics. The threat is classified as generic phishing and its risk level is elevated, with the current operational status marked as active. No additional public intelligence such as Safe Browsing verdicts, Open Threat Exchange reports, SSL certificate details, HTTP response codes, or page title information is available at this time, leaving the exact content and lure technique unverified.

Defenders should prioritize immediate containment: add the domain and its resolving IP 172.64.151.8 to outbound web filtering rules, update intrusion detection signatures to include this indicator, and monitor for any traffic spikes or credential submission attempts targeting the domain. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators such as phishing page structure or credential harvesting endpoints.