booking-comdubaii[.]webflow[.]io

The domain booking-comdubaii.webflow.io is listed as an active, elevated‑risk generic phishing site as of July 29, 2026. Registration information indicates the domain was created through Webflow, a platform that supplies both hosting and sub‑domain services, which aligns with the observed DNS configuration. DNS resolution points to the IP address 104.18.36.248, a Cloudflare edge node that is commonly shared among many unrelated sites, making IP‑based reputation less discriminating but still useful for network‑level blocking.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy intelligence feed, confirming that multiple threat‑intel sources have identified it as malicious. VirusTotal analysis shows that nine out of ninety‑one scanning engines flagged the domain, providing additional independent confirmation of malicious activity. No further details such as SSL certificate particulars, HTTP response codes, or page title have been disclosed, leaving the exact content and credential‑harvesting mechanisms unverified at this time.

Defenders should immediately add the domain and its resolving IP to DNS‑based deny lists, enforce outbound traffic filtering to the IP, and monitor for any attempted connections from internal hosts. Continued observation of the domain’s hosting changes, blocklist status, and any future VirusTotal detections is recommended to refine detection rules and to assess whether the threat evolves beyond the current generic phishing classification.