d4d5tlpcpoos73dgjmkg[.]booking-comaeu-dubai-shopping[.]webflow[.]io

This domain, d4d5tlpcpoos73dgjmkg.booking-comaeu-dubai-shopping.webflow.io, is currently under investigation as a generic phishing threat. Registered on June 12, 2026, through Webflow, the domain resolves to IP address 104.18.36.248. Analysis indicates it appears on one security blocklist, with PhishDestroy actively blocking it. No detections were reported by the 91 vendors that scanned the domain on VirusTotal, though the absence of detections does not confirm safety.

The domain's infrastructure, hosted on Webflow's platform, aligns with patterns observed in phishing campaigns leveraging legitimate hosting services to evade initial scrutiny. Defenders should note that the domain's creation date is recent, and its presence on a single blocklist suggests emerging but unconfirmed malicious activity. The exact content or target of the phishing page remains unanalyzed, as no specific brand or scam type has been identified in available data.

Organizations are advised to monitor network traffic for connections to this domain, particularly given its association with the IP 104.18.36.248, which may host additional suspicious or malicious resources. Further investigation is required to determine the scope and intent of this threat, including any potential ties to broader phishing operations. Blocking or flagging this domain at the network level is recommended until conclusive evidence of its legitimacy or malicious nature is established.