m[.]bookkingcoom--dubai[.]webflow[.]io

The domain m.bookkingcoom--dubai.webflow.io is currently flagged as a generic phishing site. It was registered on June 12, 2026 through the Webflow platform, which is commonly used for rapid website deployment and has been abused by malicious actors. DNS resolution points to the IP address 104.18.36.248, an address associated with a content‑delivery network that hosts many legitimate sites as well as malicious landing pages.

The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy filtering service, indicating that at least one upstream provider has identified it as abusive. VirusTotal reports that three of ninety‑one scanned security vendors flagged the domain, providing additional independent confirmation of malicious intent. No further public intelligence such as OTX entries, SSL certificate details, or HTTP response codes is presently available, leaving the exact content and credential‑harvesting mechanisms unverified.

The limited detection footprint suggests a recent deployment, consistent with the June creation date, and the elevated risk rating reflects the combination of active blocking, vendor detections, and the use of a reputable hosting provider to obscure the malicious payload. Defenders should continue to block the domain at network perimeter controls, monitor DNS queries for the associated IP, and add the domain to internal blocklists. Additional analysis of the live page, if possible, would be required to confirm the phishing lure and to extract any indicators of compromise such as embedded URLs or payload hashes.