booking-cccccom-dubai-restaurants[.]webflow[.]io

The domain booking-cccccom-dubai-restaurants.webflow.io was created on June 12, 2026 and is hosted on the IP address 104.18.36.248. Registration was performed through the Webflow platform, indicating that the domain leverages Webflow's site‑building service for its infrastructure. Threat intelligence records show that the domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, reflecting that at least one defensive feed has classified the site as malicious.

VirusTotal analysis reports that 2 out of 91 security vendors have flagged the domain, providing independent confirmation of suspicious activity. The overall risk rating is elevated and the campaign status is listed as active, suggesting ongoing use in a phishing‑type operation. Observable evidence therefore includes blocklist presence, vendor detections, and hosting under a shared Webflow IP that is commonly used for legitimate content, which can aid evasion.

Uncertainties remain regarding the specific payload or credential‑harvesting mechanisms employed, as no page‑title or content analysis is available. Defenders should block the domain at network perimeter and proxy layers, monitor DNS queries for the associated IP, and consider adding the domain to internal blocklists. Continuous re‑scanning with multi‑vendor services is recommended to capture any future detections, and analysts should watch for related subdomains or newly registered Webflow‑hosted sites that exhibit similar registration timestamps or blocklist activity.