careers[.]booking-dubaii-hotels[.]webflow[.]io

This domain, careers.booking-dubaii-hotels.webflow.io, is an active phishing site hosted on Webflow's infrastructure and was registered on June 12, 2026. Analysis indicates it is designed to target job seekers by impersonating hotel career portals, though the exact brand being mimicked is not confirmed in available data. As of July 29, 2026, the domain resolves to IP 172.64.151.8 and is flagged by 3 of 91 security vendors on VirusTotal, with detection specifically from PhishDestroy.

It also appears on one security blocklist, confirming elevated risk status. The use of Webflow's subdomain service suggests low-cost, rapid deployment typical of phishing campaigns, though no specific phishing kit or additional infrastructure details are currently available. Defenders should treat this domain as malicious and prioritize blocking at DNS, proxy, and endpoint levels.

Further investigation into associated email addresses, SSL certificates, or HTTP headers may reveal additional indicators, but current evidence supports immediate containment. No Safe Browsing or OTX data is present in the available intelligence, and the exact content or payload of the site remains unanalyzed.