booki-ng-com-dubai-p-acka-ges[.]webflow[.]io

The domain booki-ng-com-dubai-p-acka-ges.webflow.io was registered on June 12, 2026 through the Webflow platform and presently resolves to the IP address 104.18.36.248. Analysis indicates the site is actively being used for generic phishing operations, as reflected by its elevated risk rating and active status in the intelligence feed. Independent scanning on VirusTotal shows that 17 of 91 security vendors have flagged the domain as malicious, suggesting a moderate level of consensus among detection engines.

The domain is also listed on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing the view that it participates in credential‑harvesting or related malicious activity. While the exact content hosted on the site has not been publicly disclosed, the presence of multiple vendor detections and blocklist entries provides sufficient evidence for security teams to treat the URL as hostile.

Defenders should ensure that network perimeter controls block the domain and its resolving IP, update endpoint detection signatures to include the observed hash of the domain, and monitor for any traffic patterns that reference the Webflow‑hosted address. Continuous re‑evaluation is advised, as additional detections or changes to the site’s hosting could alter the threat posture.