bookiinngdubaihotels[.]webflow[.]io

The domain bookiinngdubaihotels.webflow.io was registered on June 12, 2026 via the Webflow platform and presently resolves to the IP address 172.64.151.8. Analysis by multiple threat‑intelligence sources shows the site is actively used in a phishing campaign, and its risk level has been assessed as elevated. VirusTotal reports that 11 out of 91 security vendors have flagged the domain as malicious, indicating a notable but not universal detection consensus.

The domain is listed on one public security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that defensive products are already recognizing the threat. No additional data such as SSL certificates, HTTP response codes, or page titles are available, leaving the exact content and target brand of the page unverified.

Defenders should add the domain to network and endpoint blocklists, monitor DNS queries for the associated IP address, and consider leveraging threat‑feed integrations that include the current blocklist entry. Continuous re‑evaluation is advised, as detection counts may rise and further intelligence could reveal the specific brand or credential‑harvesting tactics employed by the actor.