booking-com-dubaiuae-restaurants[.]webflow[.]io[.]webflow[.]io

The domain booking-com-dubaiuae-restaurants.webflow.io.webflow.io was registered on June 12 2026 via the Webflow hosting platform. It resolves to the IP address 104.18.36.248, which is part of the infrastructure used by Webflow and is commonly associated with content‑delivery services. The domain has been flagged by PhishDestroy and appears on a single external blocklist.

VirusTotal analysis shows that three of ninety‑one security vendors have marked the site as malicious, indicating that at least a subset of detection engines have identified phishing‑related behavior. No public information is currently available regarding the site’s SSL certificate, HTTP response codes, page title, or any additional threat‑intel feeds such as OTX or Safe Browsing. Consequently, the precise content and the exact phishing vector remain unverified, although the classification as generic phishing is consistent with the limited evidence.

Defenders should consider adding the domain to outbound and inbound deny lists, monitor DNS queries for the associated IP, and enable web‑filtering rules that block traffic to Webflow‑hosted subdomains exhibiting suspicious activity. Continuous re‑scanning with VirusTotal or similar multi‑engine platforms is advised to detect any changes in detection rates. Organizations with users who may receive unsolicited emails referencing travel or restaurant bookings should educate staff about the risk of credential‑harvesting pages hosted on legitimate‑looking Webflow domains and encourage reporting of any suspicious URLs.