booking-comarab-dubai-things-to-do[.]webflow[.]io

Analysis as of July 29, 2026 indicates that the domain booking-comarab-dubai-things-to-do.webflow.io was registered through the Webflow platform on June 12, 2026. The domain resolves to the IP address 104.18.36.248, which belongs to the Cloudflare network and is typical for sites hosted on Webflow. The relatively recent registration age, combined with the use of a free‑form sub‑domain pattern, is consistent with many abuse campaigns that leverage reputable hosting services to gain credibility.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service, confirming that at least one threat‑intelligence feed has classified it as malicious. VirusTotal scans show that two out of ninety‑one antivirus or URL‑reputation engines flagged the domain, providing independent corroboration of its malicious nature, although the majority of scanners did not raise an alert. No SSL/TLS certificate details, HTTP status codes, page title, or additional content analysis are available in the current intelligence set, leaving the exact content of the landing page unknown.

Defenders should treat the domain as a high‑confidence phishing indicator: it should be added to deny‑list rules, monitored for any sudden changes in hosting or resolution, and correlated with any user‑reported credential‑submission attempts. Continuous re‑evaluation is advised in case additional security vendors update their verdicts or new blocklist entries appear.