bookingndubaipackages[.]webflow[.]io

The domain bookingndubaipackages.webflow.io is currently classified as an active delivery‑related scam with an elevated risk rating. Infrastructure analysis shows the domain is hosted on Webflow, a legitimate website‑building platform, and resolves to the IP address 172.64.151.8. The hosting provider does not appear to be directly compromised, but the use of a reputable service can obscure malicious activity.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy blocklist, indicating that at least one security organization has observed abusive behavior associated with the host. VirusTotal reports that four out of ninety‑one scanning engines have flagged the domain, providing additional independent confirmation of malicious intent. No public SSL certificate details, HTTP response codes, or page title information are currently available, so the surface‑level characteristics of the site remain unknown.

Defenders should treat the domain as hostile: block traffic to and from the associated IP address, add the fully qualified domain to local and network‑level blocklists, and monitor for any related subdomains or similar naming patterns that may be used in future campaigns. Continuous re‑evaluation is advised, as additional detections or blocklist entries could emerge, altering the threat posture.