bookingcomdubaiishoppin[.]webflow[.]io

The domain bookingcomdubaiishoppin.webflow.io was registered on June 12, 2026 through the Webflow hosting platform and resolves to the address 104.18.36.248. Automated scans have placed the domain on a single security blocklist and it is actively blocked by the PhishDestroy service. VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain, indicating a non‑trivial detection signal. The threat classification is generic phishing and the risk rating is elevated; the domain remains active as of the report date, July 29, 2026.

Infrastructure analysis reveals that the domain is hosted on a shared Webflow infrastructure, which is commonly used for legitimate web content but can also be abused for short‑lived malicious sites. No public SSL certificate details, HTTP response codes, or page title information have been released, so the exact content of the landing page cannot be verified at this time. Likewise, Safe Browsing, Open Threat Exchange, and other reputation services have not published additional indicators for this host.

Defenders should treat the domain as a high‑confidence indicator of phishing activity. Recommended actions include adding the fully qualified domain name to DNS deny‑list policies, configuring web proxies to block HTTP(S) requests to the host, and ensuring that endpoint URL filtering products are updated with the latest feed that includes this domain. Network monitoring should watch for outbound connections to 104.18.36.248, and any observed traffic should be logged and investigated. Sharing the indicator with internal SOC teams and external threat‑intelligence sharing groups will help accelerate detection and mitigation across the broader community.