bookiingcommdubai[.]webflow[.]io[.]webflow[.]io

Analysis of the domain bookiingcommdubai.webflow.io.webflow.io shows that it was created on 12 June 2026 and is hosted under the Webflow registrar. The domain appears in at least one public security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that security vendors consider it malicious. VirusTotal scans of the hostname returned three positive detections out of ninety‑one submitted scanners, confirming that a minority of AV engines have identified phishing‑related behaviour. No further infrastructure details such as IP address, autonomous system number, or geographic location have been published in the current intelligence set, and no SSL certificate information or HTTP response codes are available.

Consequently, the exact delivery mechanism, landing page content, or target brand cannot be verified at this time. The presence on a blocklist combined with the limited VirusTotal detections is sufficient to classify the domain as an active generic phishing site. Defenders should immediately add the hostname to URL filtering rules, block it at the network perimeter, and monitor for any outbound connections to the associated host.

Users should be warned not to click links that contain this exact sub‑domain, and any credential submissions should be treated as compromised. Ongoing collection of passive DNS, TLS handshake, and web‑content snapshots is recommended to refine the risk assessment and to support potential takedown actions. Until additional evidence emerges, the domain remains an elevated‑risk indicator that should be treated as hostile.