d2ggnt98h1as73d488cg[.]bookingcomdubeitickets[.]webflow[.]io

Analysis indicates that the domain d2ggnt98h1as73d488cg.bookingcomdubeitickets.webflow.io was registered on June 12, 2026 through the Webflow platform and currently resolves to the IP address 172.64.151.8. The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy, suggesting that threat‑intelligence feeds have identified it as a malicious resource. VirusTotal scans show that three of ninety‑one security vendors flagged the domain, providing additional corroboration of its hostile nature.

The elevated risk rating and active status reinforce the view that the domain is being used in a generic phishing campaign. No public data is available regarding SSL certificate details, HTTP response codes, or the specific page title returned by the site, leaving those aspects of the infrastructure unverified.

Defenders should continue to block the domain at perimeter filters, update DNS blacklists with the observed IP address, and monitor for any related activity targeting the same brand vector. Ongoing observation of threat‑intel feeds for further vendor detections or blocklist additions is recommended to capture potential escalation or new infrastructure deployments associated with this campaign.