dubai-bookingcomdubai[.]webflow[.]io

The domain dubai-bookingcomdubai.webflow.io was registered through the Webflow platform on June 12, 2026 and resolves to the IP address 104.18.36.248. Webflow is a popular website‑building service that is frequently abused for malicious campaigns, and the recent creation date suggests the site was deployed as part of a new phishing operation. The domain appears on a single security blocklist, PhishDestroy, indicating that at least one anti‑phishing feed has already flagged it as malicious.

VirusTotal analysis shows that 14 of 91 scanning engines have classified the domain as malicious, providing independent confirmation of its suspicious nature. No additional data such as SSL certificate details, HTTP response codes, page title, or brand targeting has been published, leaving the exact content and intended victim profile unknown. Given the combination of a fresh registration, hosting on a shared Webflow infrastructure, presence on a reputable blocklist, and multiple vendor detections, the domain should be treated as an elevated‑risk phishing indicator.

Defenders are advised to block the domain at network perimeters, add the IP 104.18.36.248 to deny lists, and monitor DNS queries for any related subdomains. Continuous re‑evaluation is recommended as further intelligence (e.g., payload samples or victim reports) becomes available.