dubai---booking-com[.]webflow[.]io

The domain dubai---booking-com.webflow.io was registered on June 12, 2026 through the Webflow platform. DNS resolution points to the address 104.18.36.248, an IP commonly associated with Webflow‑hosted sites. Threat intelligence indicates the domain is currently active and has been assigned an elevated risk rating. It appears on a single security blocklist and is specifically blocked by the PhishDestroy service.

VirusTotal analysis shows that 14 of 91 scanned security vendors have flagged the domain, confirming a consensus of malicious classification. The observed evidence does not include additional context such as SSL certificate details, HTTP response codes, or page‑title content, leaving the exact phishing payload or lure unspecified. Consequently, defenders should treat any traffic to this host as potentially hostile.

Recommended mitigations include adding the domain to local deny lists, enforcing DNS‑based blocking for the associated IP, and monitoring outbound connections for attempts to reach the host. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators such as payload signatures or compromised credentials. Until more granular data becomes available, the prudent stance is to block the domain across corporate and endpoint security layers.