booking-com-dubai-flight-ticke-a[.]webflow[.]io

This domain, booking-com-dubai-flight-ticke-a.webflow.io, is identified as a potential phishing site impersonating a booking service. Created on June 12, 2026, the domain is registered through Webflow and resolves to the IP address 172.64.151.8. As of the report date, July 29, 2026, 16 out of 91 security vendors on VirusTotal flag this domain as malicious, indicating a significant level of suspicion.

The domain appears on one security blocklist, specifically PhishDestroy, which suggests that it has been identified as part of a phishing campaign. The exact content of the site has not been analyzed, but the domain's structure and the use of 'booking' in the name suggest an attempt to impersonate a legitimate travel booking service. Given the elevated risk level and the active status of the domain, network defenders should take immediate action to monitor and block traffic to this domain.

Additional analysis and scrutiny are recommended to determine the specific nature of the threat and to identify any associated infrastructure or indicators of compromise. Security teams should also consider alerting end-users to avoid interacting with this domain to prevent potential credential theft or financial loss.