bookiinng-com-dubaaii[.]webflow[.]io

The domain bookiinng-com-dubaaii.webflow.io was registered on June 12 2026 through the Webflow service, indicating a creation date less than two months prior to the report. DNS resolution points to the IP address 104.18.36.248, which is part of Cloudflare’s edge network and is frequently leveraged by short‑lived malicious infrastructure to obscure origin. The domain is listed on a single public security blocklist and has been actively flagged by the PhishDestroy sinkhole, confirming that at least one defensive feed has identified it as hostile.

VirusTotal analysis shows that 13 of 91 scanned anti‑malware engines label the domain as malicious, providing a modest but notable level of consensus among scanners. No additional intelligence such as Google Safe Browsing, Open Threat Exchange entries, SSL/TLS certificate details, HTTP response codes, trust‑score metrics, page title, or evidence links is currently available, leaving the specific phishing lure or targeted brand unverified. Given the limited public data, the domain should be treated as an active generic phishing infrastructure.

Defenders are advised to block the domain at perimeter firewalls, proxy filters, and DNS resolvers, and to monitor the hosting IP for the emergence of new subdomains. Continuous re‑scanning with VirusTotal or equivalent services is recommended to capture any changes in vendor verdicts. Organizations should also review authentication logs for any attempts to submit credentials to this domain, enforce multi‑factor authentication, and consider credential‑reuse detection to mitigate potential compromise.