bookingcomdubae[.]webflow[.]io

This domain, bookingcomdubae.webflow.io, is currently active and has been classified as a generic phishing site. The infrastructure analysis shows that the domain is hosted on Webflow’s platform, with registration performed through the Webflow registrar. DNS resolution points to the IPv4 address 172.64.151.8, which belongs to the public cloud network operated by Fastly.

The domain has been listed on a single external blocklist and is specifically blocked by the PhishDestroy service, indicating that at least one anti‑phishing feed has flagged it as malicious. VirusTotal analysis reports that four of ninety‑one scanning engines have generated a detection for the domain, providing additional corroboration of its suspicious nature. No public SSL certificate details, HTTP response codes, or page title information are presently available, limiting the ability to assess the site’s content or credential‑harvesting mechanisms.

Defenders should therefore treat any traffic to this host as potentially harmful. Recommended mitigations include adding the domain to network deny‑lists, configuring proxy or DNS filters to block resolution, and monitoring for other Webflow‑hosted subdomains that exhibit similar naming patterns. Continuous observation of threat‑intel feeds for updates on detection counts or additional blocklist inclusions is advised, as the threat landscape around this infrastructure may evolve.