booking--tour---dubai[.]webflow[.]io

The domain booking--tour---dubai.webflow.io was created on June 12, 2026 and is hosted on the Webflow platform. DNS resolution points to IP address 104.18.36.248, an address owned by Cloudflare, indicating the site is being served through a popular CDN and reverse‑proxy service. The domain is currently listed as active with an elevated risk rating.

Detection telemetry shows that five of ninety‑one VirusTotal scanners have flagged the domain, suggesting that at least a subset of security products have identified malicious characteristics. The domain is also listed on a single external blocklist and has been actively blocked by the PhishDestroy mitigation system. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or brand targeting is available in the current data set, leaving the exact content and lure technique unverified.

Defenders should treat the domain as a confirmed phishing vector and enforce blocking at network perimeter and endpoint filtering layers. Continuous monitoring of the associated IP range for new malicious payloads is recommended, as the Cloudflare edge may be reused for other abusive sites. Because the domain is newly minted and active, rapid inclusion in threat‑intel feeds and automated blocklists will reduce exposure while further investigative steps, such as sandboxed page retrieval, can be pursued to enrich the profile.