bookingcomdubaipackagess[.]webflow[.]io

The domain bookingcomdubaipackagess.webflow.io was registered on June 12, 2026 through the Webflow platform and resolves to IP 172.64.151.8, an address associated with Cloudflare’s edge network. Two of ninety‑one VirusTotal scanners flagged the domain, indicating the presence of malicious components identified by a minority of security vendors. The domain appears on a single external blocklist and is currently listed by PhishDestroy as a known delivery‑scam host.

The threat is classified as a delivery scam, with an elevated risk rating and an active status as of the report date, July 29, 2026. No additional public intelligence, such as Safe Browsing verdicts, OTX references, SSL certificate details, HTTP response codes, or page title information, is available at this time. Consequently, the full scope of the malicious payload and the exact victim‑targeting technique remain uncertain.

Defenders should block or sinkhole the domain at the network perimeter, monitor DNS queries for the host, and apply threat‑intelligence feeds that include the identified blocklist entry. Incident response teams should also correlate any alerts that reference the IP address 172.64.151.8 with this domain, and consider isolating compromised endpoints that have communicated with the host. Ongoing observation of the domain’s activity is recommended, as further indicators such as payload samples or phishing page content may emerge.