support[.]bookingcomhotels-dubai[.]webflow[.]io

The domain support.bookingcomhotels-dubai.webflow.io was registered on June 12, 2026 through the Webflow platform and currently resolves to IP address 104.18.36.248, an address associated with Cloudflare edge nodes. VirusTotal records show that one out of ninety‑one scanning engines has flagged the domain as malicious, indicating at least a single vendor has identified suspicious behavior. The domain also appears on a public security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the assessment that it is being used for phishing activity.

The risk rating is elevated and the status is active, meaning the infrastructure is likely still operational. No additional intelligence such as SSL details, HTTP response codes, or page title information is available at this time, so the full payload or landing‑page characteristics remain unknown.

Defenders should prioritize immediate containment by adding the domain to network deny lists, updating proxy and firewall rules to block traffic to the associated IP, and ensuring endpoint security solutions incorporate the observed indicator. Continuous monitoring for DNS queries and outbound connections to the IP address is advised, as well as periodic re‑scans to capture any changes in detection counts or new vendor observations.