booking---com--dubai[.]webflow[.]io

The domain booking---com--dubai.webflow.io was registered on June 12, 2026 through the Webflow hosting platform and resolves to the IP address 104.18.36.248. VirusTotal analysis shows that four out of ninety‑one security vendors have flagged the domain as malicious, indicating that at least a minority of scanners have identified suspicious behavior. The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy service, which further confirms its classification as a phishing resource.

No additional public intelligence such as Safe Browsing alerts, Open Threat Exchange (OTX) entries, or SSL certificate details are currently available for this host. Consequently, the security posture of the underlying infrastructure cannot be fully assessed; the lack of published page titles, HTTP response codes, or trust‑score metrics leaves the surface‑level characteristics of the site unverified. Analysts should treat the domain as an active phishing threat, especially given its recent creation date and the presence of multiple vendor detections.

Defensive measures should include immediate addition of the domain to local blocklists, updating network‑level DNS filters, and ensuring that email security gateways incorporate the blocklist entry from PhishDestroy. Continuous monitoring of the IP 104.18.36.248 for changes in reputation or additional detections is recommended, as is periodic re‑scanning of the domain to capture any evolution in its malicious payload or hosting configuration.