booking---com-dubai[.]webflow[.]io[.]webflow[.]io

Analysis indicates that the domain booking---com-dubai.webflow.io.webflow.io was registered on June 12, 2026 through the Webflow hosting platform. The domain resolves to the IP address 172.64.151.8 and is currently listed on one public security blocklist. PhishDestroy has actively blocked the domain, confirming that it is being used for malicious activity. VirusTotal reports that 4 of 91 security vendors have flagged the domain, providing additional evidence of its suspicious nature.

No public SSL certificate details, HTTP status codes, or page title information are available from the supplied intelligence, so the content of the site remains unverified. The lack of a disclosed target brand means the exact impersonation objective cannot be confirmed at this time. Defenders should treat the domain as an elevated‑risk indicator.

Recommended mitigation steps include adding the domain and its associated IP address to DNS filtering policies, updating web proxy blocklists, and monitoring outbound traffic for connections to 172.64.151.8. Organizations should also educate users about unsolicited communications that reference booking services, as the domain name suggests a possible attempt to mimic legitimate booking platforms. Continuous threat‑intel feeds should be consulted for any emerging indicators such as additional blocklist listings, SSL certificate deployments, or observed payloads associated with this host.