booking-com-dubai-ddesert-safaaari[.]webflow[.]io

The domain booking-com-dubai-ddesert-safaaari.webflow.io was registered on June 12, 2026 through the Webflow platform and resolves to the IP address 104.18.36.248. It is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing repository considers the site malicious. VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain, providing additional independent corroboration of its suspicious nature.

No public information is available regarding the site’s SSL configuration, HTTP response codes, page title, or the specific brand it may be impersonating; these elements remain unverified. Infrastructure clues suggest the domain is hosted behind a content‑delivery network, a common tactic for fast‑flux or proxy‑based phishing operations, but the exact provider is not disclosed in the supplied intelligence. The limited detection footprint—only two vendor detections and a single blocklist entry—does not diminish the observed risk, as the active status and recent creation date point to a freshly deployed campaign targeting users seeking travel‑related services.

Defenders should add the domain to URL filtering rules, enforce block‑by‑IP for the associated address, and monitor for any new indicators that may appear in threat‑intel feeds. Continuous re‑scanning with multi‑engine services is advised to capture any evolving signatures, and any traffic to the domain should be logged for forensic analysis. Organizations employing web‑proxy or DNS‑filtering solutions are recommended to update their policies to deny resolution of this host, thereby mitigating exposure to the confirmed phishing threat.