your-booking-com-dubai[.]webflow[.]io

The domain your-booking-com-dubai.webflow.io is currently active and has been classified as a generic phishing site with an elevated risk rating. VirusTotal analysis shows that nine out of ninety‑one security vendors have flagged the domain, indicating that multiple detection engines have identified malicious characteristics. The domain also appears on a single external blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its reputation as a threat vector.

Registration data reveals that the domain was created through the Webflow platform, a popular website‑building service that often provides shared hosting and SSL certificates by default. DNS resolution points to the IP address 104.18.36.248, which belongs to the Cloudflare network and is commonly used for content delivery and mitigation services; however, the same IP hosts a variety of unrelated legitimate sites, making IP‑based blocking less precise. No additional intelligence such as page titles, SSL certificate details, or HTTP response codes is presently available, so the exact content and lure technique employed by the site remain unverified.

Defenders should prioritize adding the domain to local blocklists, updating network intrusion prevention signatures, and monitoring outbound connections to the associated IP range. Given the multi‑vendor detection and blocklist presence, continuous observation of traffic to this domain is advised, and any user‑initiated requests to the URL should be blocked or redirected to a warning page. Organizations using web filtering should ensure that the domain is included in their threat feeds to mitigate potential credential harvesting attempts.