booking-com-dubbbaai-tickets[.]webflow[.]io

Analysis of booking-com-dubbbaai-tickets.webflow.io indicates that the domain was registered on 12 June 2026 through the Webflow hosting service. The domain resolves to the IP address 172.64.151.8, a range commonly associated with Webflow’s content‑delivery infrastructure. It appears on one public security blocklist and is actively blocked by the PhishDestroy filtering service, confirming that security operators have identified it as malicious.

VirusTotal reports that 2 of 91 scanned security vendors flag the domain, providing independent corroboration of its suspicious nature. The threat is classified as generic phishing with an elevated risk rating and the infrastructure is currently marked as active. No public information is available regarding the page title, SSL certificate details, HTTP response codes, or any observed payload, so the precise phishing technique and targeted brand remain unknown.

Defenders should treat the domain as hostile: ingest the domain into network‑level blocklists, deny traffic to its resolving IP address, and monitor for additional Webflow‑hosted domains created after June 2026 that exhibit similar resolution patterns. Continuous re‑evaluation is advised as additional intelligence, such as page content analysis or further vendor detections, becomes available.