bookings-com-dubai-flights-tickets[.]webflow[.]io

The domain bookings-com-dubai-flights-tickets.webflow.io is currently active and classified as a high‑risk generic phishing site. Infrastructure analysis shows it resolves to the IP address 172.64.151.8, which is hosted by the Webflow platform; the domain was registered on June 12, 2026 through Webflow’s registration service. Detection services have flagged the domain: PhishDestroy has added it to its blocklist, it appears on one additional security blocklist, and Google Safe Browsing categorises it as a social‑engineering threat.

VirusTotal scans report that 16 of 91 security vendors label the domain as malicious, indicating a moderate consensus of detection across the vendor ecosystem. The domain’s risk rating is high, and its status remains active, suggesting ongoing malicious use. No public SSL details, HTTP response codes, or page‑title information are available at this time, limiting visibility into the exact phishing payload or lure employed.

Defenders should immediately block DNS resolution to 172.64.151.8 and add the full domain to perimeter and endpoint blocklists. Network monitoring should be configured to alert on any outbound connections to the domain or its hosting provider, and existing email filters should be updated to flag messages that reference the domain or contain similar URL patterns. Continuous re‑scanning with VirusTotal and other sandbox services is advised to capture any changes in payload or additional vendor detections.