boking-comdubai[.]webflow[.]io

Analysis of boking-comdubai.webflow.io indicates that the domain was registered on June 12, 2026 via the Webflow platform and resolves to the IP address 104.18.36.248, which is part of Cloudflare's edge network. VirusTotal scans have recorded detections from four out of ninety‑one submitted security vendors, demonstrating a measurable level of malicious classification. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has identified it as abusive.

The threat type is listed as generic phishing, and the risk level has been assigned as elevated, reflecting the potential for credential harvesting or other fraudulent activity. No additional public intelligence such as Safe Browsing verdicts, Open Threat Exchange reports, or SSL/TLS certificate details are currently available for this host, leaving the full scope of its malicious infrastructure uncertain. Defenders should prioritize blocking outbound connections to 104.18.36.248 for any internal users, especially those accessing Webflow‑hosted resources, and should add boking-comdubai.webflow.io to URL filtering and email gateway deny lists.

Continuous monitoring of the domain’s resolution and any future VirusTotal or blocklist updates is advised, as further detections may increase confidence in its classification. Incident response teams should also consider correlating any recent credential‑theft alerts with traffic to this domain to determine if it has been used in targeted campaigns.