fnerzbooking-s-dubai[.]webflow[.]io

Analysis of fnerzbooking-s-dubai.webflow.io indicates that the domain was registered on June 12, 2026 through the Webflow hosting platform. DNS resolution points exclusively to the IP address 104.18.36.248, an address belonging to the Cloudflare network, which is commonly used by legitimate sites but also frequently abused for malicious hosting. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, demonstrating that at least one anti‑phishing vendor has taken definitive action against it. VirusTotal reports that two out of ninety‑one scanning engines have flagged the domain, providing modest but non‑trivial corroboration of malicious intent.

No additional public threat‑intel sources, such as OTX or Google Safe Browsing, are referenced in the supplied data, leaving the broader detection landscape unconfirmed. The lack of a disclosed page title or content analysis means the exact phishing lure employed by the site cannot be verified at this time; however, the combination of recent creation, use of a free‑hosting registrar, and positive detections aligns with typical characteristics of generic phishing infrastructure. Defenders should prioritize immediate blocking of the domain at perimeter filters and add the associated IP address to blacklist entries.

Ongoing monitoring of traffic to 104.18.36.248 is advised, as the address may host additional malicious assets under the same Cloudflare umbrella. Further investigation, such as fetching the HTTP response headers and page title, would reduce uncertainty and support attribution efforts. Until a more detailed content profile is obtained, the domain should be treated as an active phishing threat with elevated risk.