d4d5qr1cpoos73dg9ntg[.]booking-dubai-desert-safaria[.]webflow[.]io

Analysis of the domain d4d5qr1cpoos73dg9ntg.booking-dubai-desert-safaria.webflow.io indicates that it is currently under investigation for generic phishing activity. The domain was created on 12 June 2026 and is hosted by Webflow, a platform that provides managed hosting for user‑generated sites. It appears on a single security blocklist and is specifically blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing vendor has taken mitigation action against it. A VirusTotal scan performed on the domain involved 91 antivirus and URL‑reputation engines; none of the engines raised a detection at the time of the scan.

The lack of detections does not constitute proof of benign intent, but it does demonstrate that the sample has not yet triggered signatures in the evaluated engines. No public information on the hosting IP address, ASN, or geographic location has been disclosed, and no SSL certificate details, HTTP response codes, or page‑title metadata are presently available. Consequently, the full technical footprint of the site remains partially opaque. Defenders should treat the domain as hostile until further evidence clarifies its behavior.

Recommended actions include adding the domain to local deny lists, enforcing block‑list rules from PhishDestroy, and monitoring DNS queries for related sub‑domains or look‑alike variations. Continuous re‑scanning on VirusTotal and other reputation services is advised, as additional detections may emerge as signatures are updated. Given the recent registration date and the presence on a blocklist, the domain poses a credible phishing risk that warrants proactive network‑level containment and user‑awareness alerts.