booking----comsdubai[.]webflow[.]io

The domain booking----comsdubai.webflow.io was registered on June 12, 2026 through the Webflow hosting platform and resolves to the IP address 104.18.36.248. Early detection activity indicates that the domain is currently flagged by multiple security services: PhishDestroy has placed it on its block list, and VirusTotal reports that 14 out of 91 scanned antivirus and URL analysis engines have identified the domain as malicious. In addition, the domain appears on one external blocklist, reinforcing the view that it is being used for malicious purposes.

The available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any Safe Browsing or Open Threat Exchange (OTX) entries, so the exact content and the specific phishing vector remain unverified. Nonetheless, the convergence of a recent registration, hosting on a popular website‑builder service, and multiple independent detections suggests a high likelihood of abuse. Defenders should treat any traffic to or from this domain as suspicious.

Recommended actions include adding the domain to local deny lists, blocking outbound connections to the associated IP address, and monitoring for any credential or credential‑related payloads that reference the domain. Continuous re‑evaluation is advised, as additional analysis may surface more detailed indicators such as page content, TLS fingerprints, or associated command‑and‑control endpoints.