booking-com-adubai-restaurants[.]webflow[.]io

The domain booking-com-adubai-restaurants.webflow.io was created on 12 June 2026 and is hosted through the Webflow website‑building service. DNS resolution returns the address 104.18.36.248, which belongs to a Cloudflare edge node and does not reveal a dedicated backend server. The domain appears on a single external security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing organization has observed malicious activity associated with this host. VirusTotal analysis shows that 2 of 91 scanned security vendors flagged the domain, providing additional independent confirmation of suspicious behavior.

The threat classification supplied is generic phishing, and the risk rating is elevated while the operational status remains active as of the report date, 29 July 2026. Observable evidence is therefore limited to registration metadata, hosting location, and the presence on blocklists and vendor scans. No public page title, SSL certificate details, HTTP response codes, or content snapshots have been published, so the exact phishing lure or credential‑harvesting mechanism cannot be confirmed at this time.

Consequently, analysts should treat the domain as a high‑confidence indicator of phishing infrastructure and enforce network‑level blocks for any traffic to the host. Continuous monitoring of the IP address 104.18.36.248 for additional malicious domains is advised, as Cloudflare edge nodes often serve multiple unrelated sites. Organizations using URL filtering, DNS sinkholing, or endpoint protection should add the domain to their deny lists and consider sharing the indicator with threat‑intel platforms to improve collective detection.