bookingccomdubaishopping[.]webflow[.]io

The domain bookingccomdubaishopping.webflow.io was registered on June 12, 2026 via the Webflow SaaS platform. Its DNS resolves to 104.18.36.248, an address owned by Cloudflare, which is commonly used to host web‑content for many legitimate sites as well as abusive pages. PhishDestroy has actively blocked the domain, and it appears on a single external blocklist. VirusTotal analysis shows that two of ninety‑one AV engines submitted a detection for the domain, indicating that at least a minority of scanners have identified malicious behavior.

No additional public intelligence such as Safe Browsing verdicts, OTX references, or SSL certificate details were available at the time of analysis. The page title and HTTP response code have not been captured, leaving the exact content of the site unverified. Given the recent creation date, the use of a reputable hosting provider, and the presence of detections on multiple security services, the domain exhibits characteristics consistent with a generic phishing operation.

The limited detection footprint suggests that the site may be in an early stage of deployment or employing evasion techniques that avoid broader detection. Defenders should consider adding the domain to outbound‑web filtering rules, monitoring DNS queries for the IP address 104.18.36.248, and reviewing any user‑initiated traffic that matches the URL pattern. Continued observation of VirusTotal and other threat‑intel feeds is advised to capture any escalation in detection counts or additional indicators of compromise.