booking-comm-dubai-desert-safarii[.]webflow[.]io

The domain booking-comm-dubai-desert-safarii.webflow.io was registered on June 12 2026 through the Webflow registrar. It resolves to the IP address 104.18.36.248, which belongs to Cloudflare’s global network. The domain is currently listed as active with an elevated risk rating. VirusTotal analysis shows that 2 of 91 security vendors have flagged the domain, indicating a low but non‑zero detection rate. The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy feed.

No public intelligence such as page title, SSL certificate details, or HTTP status codes has been disclosed, so the exact content and any credential‑harvesting behavior remain unverified. The single security blocklist entry references the same PhishDestroy indicator, and no other community feeds have reported the domain. No evidence of an SSL certificate mismatch or expired TLS has been observed, but the absence of such data cannot be interpreted as safety. The infrastructure analysis indicates reliance on a shared CDN, which can mask the true origin of the malicious payload.

Because the domain uses a legitimate Webflow hosting service, standard URL‑based blocking may be required to avoid collateral impact on legitimate Webflow sites. Defenders should add the domain to outbound filtering rules, monitor DNS queries for the IP 104.18.36.248, and consider immediate blocklisting in internal security controls. Continuous re‑evaluation of VirusTotal and other sandbox reports is advised, as additional detections may surface. Until further forensic evidence is obtained, the domain should be treated as a probable phishing conduit targeting users interested in Dubai desert safari bookings.