bookiinng-comdubai[.]webflow[.]io[.]webflow[.]io

The domain bookiinng-comdubai.webflow.io.webflow.io was created on June 12, 2026 and is hosted on the Webflow platform, as indicated by the registrar information. DNS resolution points to the IP address 104.18.36.248, a Cloudflare edge node that is commonly used for legitimate Webflow sites but can also serve malicious payloads. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one trusted feed has identified it as malicious.

VirusTotal analysis shows that 4 of 91 security vendors have flagged the domain, providing additional independent corroboration of its malicious nature. No further public intelligence such as page title, SSL certificate details, or HTTP response codes is available, leaving the exact content and lure technique unverified. Given the confirmed generic phishing designation, the presence on a blocklist, and multiple vendor detections, defenders should treat the domain as hostile.

Recommended mitigation steps include adding the domain and its resolving IP 104.18.36.248 to network deny lists, configuring web proxy filters to block outbound requests to the host, and monitoring for any internal DNS queries or traffic toward the address. Continuous re‑evaluation is advised, as threat actors may modify the site or relocate infrastructure, but current evidence supports an elevated risk posture for this domain.