demo[.]bookingsccomdubaidesertsafari[.]webflow[.]io

The domain demo.bookingsccomdubaidesertsafari.webflow.io was registered on June 12, 2026 through the Webflow platform and currently resolves to the IP address 104.18.36.248. VirusTotal records indicate that three of ninety‑one scanning vendors have flagged the domain, suggesting a modest level of detection across commercial products. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing‑related resource.

The risk rating is elevated and the operational status is active, meaning the domain may still be serving malicious content or supporting credential‑collection infrastructure. No additional metadata such as page title, SSL certificate details, HTTP response codes, or brand targeting information has been disclosed, leaving the exact nature of the hosted page uncertain.

Defenders should prioritize adding the domain and its associated IP address to deny‑list rules, monitor outbound connections to the 104.18.36.248 endpoint, and enforce web‑filtering policies that block access to Webflow‑hosted subdomains identified as phishing. Continuous re‑scanning with multi‑vendor services is advised to capture any changes in detection status, and any observed traffic to the domain should be logged for further forensic analysis.