dubaibooking[.]webflow[.]io

The domain dubaibooking.webflow.io is currently classified as a generic phishing site with an elevated risk rating and an active status as of July 29, 2026. Intelligence indicates that the domain was registered through Webflow, a legitimate website‑building platform, and resolves to the IP address 104.18.36.248. It has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist. VirusTotal analysis shows that 6 of 91 security vendors have identified the domain as malicious, providing a modest but notable detection consensus.

No further data such as page title, SSL certificate details, Safe Browsing verdict, OTX references, or additional blocklist listings are available in the current intelligence set. Consequently, the precise content and phishing lure employed by the site remain unknown, and the lack of public page metadata limits deeper content‑based attribution. Defenders should prioritize immediate containment actions: add dubaibooking.webflow.io and its resolved IP 104.18.36.248 to network and DNS blocklists, enforce URL filtering policies that deny access, and monitor outbound traffic for connections to the host.

Continuous re‑scanning with VirusTotal and other sandbox services is advised to capture any evolution in the payload or detection rate. Given the domain’s association with a reputable hosting provider, organizations should also consider alerting the provider of the abuse to facilitate takedown. Ongoing threat‑intel feeds should be consulted for any new indicators that may emerge, such as additional vendor detections or expanded blocklist listings.