dubai--booking-com[.]webflow[.]io

The domain dubai--booking-com.webflow.io was created on June 12, 2026 and is registered through the Webflow platform. Infrastructure analysis shows the hostname resolves to the IP address 104.18.36.248, which is hosted on a service commonly used for legitimate web content but has been leveraged for malicious activity in this case. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing organization has taken mitigation action.

VirusTotal scans report that three of ninety‑one security vendors have flagged the domain, providing additional independent confirmation of its malicious nature. The overall risk assessment is elevated, and the domain’s status is listed as active, meaning it is currently reachable and may be used in ongoing campaigns. Defenders should add the domain and its resolving IP to network deny‑lists, enforce DNS filtering to block resolution, and monitor outbound connections for traffic to 104.18.36.248.

Continuous re‑evaluation is advised, as additional security vendors may update their detections and further blocklists could enumerate the domain. Until more detailed behavioral data is released, the prudent response is to treat any communications referencing the domain as potentially fraudulent and to educate end users about the risk of unsolicited requests that claim association with the “booking‑com” brand.