bbooking--comdubai[.]webflow[.]io

Analysis as of July 29 2026 identifies bbooking--comdubai.webflow.io as an active generic phishing infrastructure with an elevated risk rating. The domain was created on June 12 2026 and is registered through the Webflow platform, which provides hosted website services. DNS resolution returns the IPv6 address 2606:4700:440c::ac40:9708, indicating placement within a cloud‑based hosting environment. VirusTotal reports that 14 of 91 security vendors have flagged the domain, reflecting a non‑trivial detection rate.

The domain currently appears on one public security blocklist and has been explicitly blocked by the PhishDestroy sinkhole, confirming its malicious use. No public page title, SSL certificate details, or HTTP response codes have been published, leaving the exact content of the site unverified. The lack of additional intelligence such as brand targeting or specific phishing kit means that attribution remains limited to a generic phishing classification.

Defenders should proactively add the domain to DNS and URL filtering policies, ensure that any outbound connections to the observed IPv6 address are denied, and monitor for related subdomains or new registrations that share the same registrar. Continuous re‑scanning with multi‑vendor services is advised to capture any changes in detection status. Given the recent creation date and active blocklist presence, the infrastructure should be regarded as a live threat requiring immediate mitigation.