com-dubaibooking[.]webflow[.]io

Analysis of com-dubaibooking.webflow.io shows that it is currently active and has been identified as a generic phishing threat. The domain is hosted on the IP address 104.18.36.248, which belongs to the Cloudflare network commonly used by Webflow‑hosted sites. Registration information indicates the domain was created through Webflow, a SaaS website builder that provides free subdomains and hosting.

The domain has been blocked by the PhishDestroy platform and appears on one external security blocklist, providing independent confirmation of malicious intent. VirusTotal scans report that seven of ninety‑one security vendors have flagged the domain, reinforcing the suspicion of phishing activity. No additional intelligence such as page title, brand targeting, or detailed payload characteristics has been published, so the exact phishing lure and victim profile remain uncertain.

Defenders should treat the domain as high‑risk: enforce URL filtering to block outbound connections, add the domain to internal deny lists, and monitor DNS queries for related Webflow subdomains. Continuous re‑evaluation is advised, as further analysis of the site’s content could reveal additional indicators of compromise or specific credential‑stealing schemes.