booking-com-dubai-flights-tick-bccc[.]webflow[.]io

Analysis indicates that the domain booking-com-dubai-flights-tick-bccc.webflow.io is an active phishing infrastructure targeting users with fraudulent travel booking offers. Registered on June 12, 2026, through Webflow, the domain resolves to the IP address 172.64.151.8. As of July 29, 2026, two out of ninety-one security vendors on VirusTotal have flagged this domain, and it appears on at least one security blocklist, with PhishDestroy currently blocking access. The domain's structure, incorporating terms like 'booking-com' and 'dubai-flights,' suggests an attempt to deceive users into believing it is associated with legitimate travel services, though the exact content and mechanisms of the phishing site remain unconfirmed due to limited public analysis.

Infrastructure analysis reveals the domain is hosted on Webflow's platform, which is commonly used for both legitimate and malicious purposes. The IP address 172.64.151.8 does not provide additional context regarding hosting providers or geolocation at this time. No further details are available regarding the specific phishing kit, targeted brand, or user interaction flow, as the site's content has not been fully analyzed.

Defenders should treat this domain as elevated risk and consider implementing network-level blocks or monitoring for connections to 172.64.151.8. Organizations are advised to review logs for any internal access to booking-com-dubai-flights-tick-bccc.webflow.io and assess potential exposure. Given the domain's recent registration and limited detection coverage, additional scrutiny is warranted as more intelligence may emerge.