d4d5tihcpoos73dgjbqg[.]bookkingcom-dubai[.]webflow[.]io

The domain d4d5tihcpoos73dgjbqg.bookkingcom-dubai.webflow.io was registered on June 12, 2026 through the Webflow registrar and resolves to the IP address 172.64.151.8. It has been listed on a single open‑source blocklist, PhishDestroy, indicating that at least one community source has flagged the domain for malicious activity. VirusTotal records show the domain was examined by 91 security vendors; none of those scanners produced a detection at the time of the last query, but the absence of a detection does not imply safety, especially given the recent creation date and blocklist inclusion.

No public threat‑intel platforms such as OTX or Google Safe Browsing have published findings for this host, and no SSL certificate details, HTTP response codes, or page‑title metadata have been released in the available data set. Consequently, the operational characteristics of the site—such as the presence of credential‑collection forms or the use of known phishing kits—remain unverified. Defenders should treat the domain as an active phishing risk: block the hostname and its resolved IP at perimeter firewalls, update DNS filtering policies to include the address, and monitor for any outbound connections from internal hosts to the 172.64.151.8 endpoint.

Continuous re‑scanning with multi‑vendor services is advised, as the low vendor detection count may change if new payloads or indicators are observed. Analysts should also watch for related subdomains under the same registrar that may share infrastructure, and consider adding the domain to internal threat‑intel feeds to expedite future detection.