bookiingcomm-dubai[.]webflow[.]io

Analysis as of July 29 2026 indicates that the domain bookiingcomm-dubai.webflow.io is actively used for phishing. The site is hosted on the Webflow platform, as indicated by the registrar information, and resolves to the IP address 104.18.36.248, which belongs to Cloudflare's network commonly used by Webflow customers. The domain has been added to a security blocklist and is flagged by the PhishDestroy service, confirming its malicious intent. VirusTotal scans show that six out of ninety‑one antivirus and URL‑reputation engines have identified the domain as malicious, providing independent corroboration of the phishing classification.

No additional public intelligence such as Safe Browsing alerts, OTX mentions, or SSL certificate anomalies are currently available. The lack of a disclosed page title or content analysis means the exact phishing lure cannot be determined at this time. Defenders should continue to block the domain at network perimeter devices and DNS resolvers, and add it to local threat intelligence feeds.

Monitoring of the associated IP address for any further malicious activity is advised, as the address is shared among many legitimate Webflow sites, which could complicate attribution. Organizations should also consider notifying users of potential phishing attempts that reference Dubai‑related services, given the domain’s naming pattern, and encourage verification of any unsolicited communications that reference the domain. Incident response teams should treat any credential submissions to this domain as compromised and initiate standard credential reset and account monitoring procedures.