booking-dubai-desert-safaria[.]webflow[.]io

This domain is flagged as a confirmed phishing site based on multiple security vendor detections and blocklist presence. VirusTotal reports that 14 of 91 security vendors flag this domain as malicious, indicating broad consensus across the security community. The domain is actively blocked by PhishDestroy and appears on 1 security blocklist, confirming its inclusion in threat intelligence feeds. The domain resolves to IP address 104.18.36.248, which is associated with Webflow's hosting infrastructure, and the domain was registered through Webflow as the registrar.

This hosting arrangement is legitimate infrastructure being misused for phishing purposes, as Webflow is a legitimate web hosting and design platform. The domain booking-dubai-desert-safaria.webflow.io follows a pattern suggestive of travel or event booking scams, leveraging the reputable Dubai desert safari tourism theme to deceive victims. However, the exact page content, brand impersonated, and scam kit used have not been analyzed, so the specific targeting or lure strategy remains unconfirmed. The domain is currently active and accessible, posing an ongoing risk to users who may encounter it through search results, email links, or social media posts.

Defenders should immediately add this domain to blocklists and URL filtering policies, monitor for related subdomains or variations under the same Webflow.io subdomain, and investigate any associated email campaigns or traffic logs that may indicate compromise of user credentials or financial data. Given the elevated risk level and active status, users should be warned against visiting this domain or entering any personal information. The domain's association with Webflow infrastructure means takedown requests should be directed to Webflow's abuse team, though the phishing site may be quickly recreated under a new subdomain after removal. Continuous monitoring of newly registered subdomains under webflow.