bookkingcom-dubai[.]webflow[.]io

Analysis of the domain bookkingcom-dubai.webflow.io shows that it was created on June 12, 2026 using the Webflow registrar, a platform commonly leveraged for rapid site deployment. The domain resolves to the IP address 104.18.36.248, which is associated with the hosting infrastructure used by Webflow and does not, by itself, indicate malicious intent. However, the domain appears on a single security blocklist and has been actively blocked by the PhishDestroy filtering service, indicating that external threat‑intelligence feeds have already classified it as hostile.

VirusTotal scans report that two of ninety‑one security vendors have flagged the domain, providing modest but non‑trivial corroboration of malicious activity. The limited detection count suggests that the site may be newly deployed or that detection signatures have not yet fully propagated. No public information is available regarding SSL certificate details, HTTP response codes, page title, or any associated brand impersonation, leaving the exact content of the site unverified.

Defenders should therefore treat the domain as a confirmed phishing vector based on the blocklist entry and vendor flags. Recommended mitigation steps include adding the domain to outbound filtering rules, monitoring DNS queries for the resolved IP, and employing heuristic detection to catch similar Webflow‑hosted phishing constructions. Continued observation of threat‑intel feeds for additional detections or blocklist listings is advised to refine the risk posture as further evidence emerges.