api[.]arabbooking-com-dubai-desert-safari[.]webflow[.]io

Analysis of the domain api.arabbooking-com-dubai-desert-safari.webflow.io, created on 12 June 2026 and hosted on the Webflow platform, indicates that it is currently flagged as a phishing site under investigation. The domain resolves to the IP address 104.18.36.248, which belongs to the content‑delivery network used by Webflow. No SSL certificate details, HTTP response codes, or page‑title information are available in the supplied intelligence, so the exact content served by the site cannot be confirmed at this time. VirusTotal records show that the domain has been scanned by 91 anti‑malware vendors, and none of those vendors reported a detection at the time of the scan.

While the lack of detections does not constitute proof of safety, it demonstrates that the domain has not yet been identified by those engines as malicious. The domain appears on one external security blocklist and has been added to the PhishDestroy blocklist, providing independent confirmation of malicious intent. No references to other reputation services such as Google Safe Browsing, OTX, or public trust scores are present in the data set. Registrar information confirms that the domain was registered through Webflow, a service that enables rapid site deployment without traditional domain‑registration steps.

The combination of a very recent creation date, association with a known phishing blocklist, and the absence of publicly available safety signals warrants heightened caution. Defenders should consider adding the domain to internal deny lists, monitor DNS queries for the IP 104.18.36.248 for anomalous activity, and enforce URL‑filtering policies that block access to the domain. Continuous re‑evaluation is advised because the threat status is listed as “active” and “under investigation,” indicating that additional malicious activity may emerge in the future.