dev[.]arabbooking-com-dubai-desert-safari[.]webflow[.]io

This domain, dev.arabbooking-com-dubai-desert-safari.webflow.io, was registered on June 12, 2026, through Webflow and is currently flagged as an active generic phishing threat. Infrastructure analysis reveals the domain resolves to IP address 104.18.36.248, a Cloudflare-hosted endpoint commonly used for both legitimate and malicious sites. As of July 29, 2026, the domain appears on one security blocklist and is blocked by PhishDestroy, though no detections were recorded among the 91 vendors that scanned it on VirusTotal. The absence of detections does not confirm safety, as phishing domains often evade initial scans through obfuscation or delayed payload delivery.

The domain name includes the string 'arabbooking-com-dubai-desert-safari,' suggesting an attempt to impersonate a travel or tourism service related to Dubai desert safaris. However, the exact content and target brand have not yet been confirmed through page analysis. No known phishing kit or specific scam category has been identified in available intelligence. The use of Webflow, a legitimate website builder, is consistent with observed phishing tactics that leverage free or low-cost hosting platforms to reduce infrastructure costs and evade detection.

Defenders should treat this domain as suspicious based on its naming pattern, recent registration, and presence on a security blocklist. Network-level blocking is recommended, particularly for organizations in the travel, hospitality, or financial sectors, where users may be targeted for credential theft or payment fraud. Further monitoring is advised, as additional detections or infrastructure changes may emerge. The domain remains under investigation, and updates to detection status should be reviewed as new intelligence becomes available.