booking-comdubaihotels[.]webflow[.]io

Analysis of booking-comdubaihotels.webflow.io indicates that the domain was registered on June 12, 2026 through the Webflow platform. The domain resolves to the IP address 104.18.36.248, which is part of the infrastructure used by Webflow‑hosted sites. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy feed. VirusTotal records show that 2 of 91 scanned security vendors have flagged the domain, confirming at least a minimal detection consensus.

The threat type is classified as generic phishing and the risk level has been assigned as elevated. The domain’s current status is active, meaning it continues to resolve and can be accessed by clients. Available intelligence does not include details such as HTTPS certificate metadata, HTTP response codes, or page title, so the exact content served by the site remains unknown. The limited detection signal—two vendor flags and a single blocklist entry—suggests that the malicious infrastructure is still in early deployment or that broader detection coverage has not yet been achieved.

Defenders should treat the domain as hostile, block DNS resolution and network traffic to the associated IP address, and add the domain to internal phishing and URL filtering policies. Continuous monitoring of VirusTotal, additional blocklist feeds, and any emerging telemetry is recommended to capture further activity. Organizations that receive emails or messages referencing “booking.com” or Dubai hotel reservations should verify URLs before interaction and consider the domain as a potential credential‑harvesting vector.