cdn[.]com-dubaibooking[.]webflow[.]io

This report assesses the domain cdn.com-dubaibooking.webflow.io, which is currently classified as an active generic phishing threat. The domain was registered on June 12, 2026, via Webflow and presently resolves to the IP address 104.18.36.248. At the time of analysis, the domain appears on one security blocklist, specifically flagged and blocked by PhishDestroy, indicating that at least one threat intelligence provider has identified this asset as malicious or associated with phishing activity.

No additional brands, page titles, or scam kit details have been observed, and the exact content or targeting of the website is not yet analyzed. VirusTotal has scanned the domain with 91 vendors, but none currently detect it; however, the absence of detection should not be interpreted as evidence of safety, especially given the confirmed blocklist entry. There are no reports from other major threat intelligence platforms, and the domain's registration and hosting infrastructure do not offer further evidence of legitimacy or compromise.

Given its recent creation, active status, and blocklist presence, defenders are advised to treat cdn.com-dubaibooking.webflow.io as a credible phishing risk. Network administrators should consider proactively blocking this domain and monitoring for related IOC activity in their environments. Continued observation and correlation with additional intelligence sources are recommended to track changes in detection and potential campaign evolution.