forum[.]booking-comabdubai-shopping[.]webflow[.]io

The domain forum.booking-comabdubai-shopping.webflow.io was registered through the Webflow platform on June 12, 2026. It resolves to the IP address 104.18.36.248, a host commonly associated with Webflow‑hosted sites. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy filtering service, indicating that at least one downstream security product has identified it as malicious.

VirusTotal analysis shows that 3 of 91 scanned security vendors have flagged the domain, providing additional corroboration of its hostile nature. No public information is available regarding its SSL certificate, HTTP response codes, page title, or any additional evidence links, suggesting that deeper content inspection has not yet been published. The limited detection footprint—one blocklist entry and three vendor detections—means the threat may be in an early deployment stage or operating with a low profile.

Defenders should add the domain to internal blocklists, monitor outbound connections to the associated IP, and enforce Web‑filtering policies that deny access to Webflow‑hosted subdomains that are not explicitly authorized. Continuous re‑evaluation is advised, as additional security vendors may raise their detection scores and further intelligence (e.g., OTX or Safe Browsing) could surface as the campaign evolves.