search-booking-com-dubai[.]webflow[.]io

Analysis indicates that the domain search-booking-com-dubai.webflow.io was registered on June 12, 2026 through the Webflow hosting service. DNS resolution points to the IP address 104.18.36.248, which is part of Cloudflare’s edge network. VirusTotal reports that 13 of 91 antivirus and URL scanners have flagged the domain as malicious, suggesting a consensus of moderate detection across multiple vendors. The domain is listed on one public blocklist and has been actively blocked by the PhishDestroy feed, confirming that at least one external mitigation platform considers it a threat.

No public Safe Browsing, OTX, or SSL certificate details have been disclosed for this host, and no page title or content analysis is currently available. The lack of additional infrastructure indicators such as ASN, country, or hosting provider beyond the Cloudflare edge limits deeper attribution. Defenders should add the domain to outbound filtering rules, ensure DNS sinkhole or blocklist enforcement includes the observed entry, and monitor traffic to the associated IP for anomalous connections. Continuous re‑scanning with VirusTotal and other sandbox services is advised to capture any evolution of payloads.

Because the domain is hosted on a legitimate SaaS platform, standard URL filtering may miss it unless the specific host name is included, so updating web proxy and secure web gateway policies with the exact domain string is recommended. Incident response teams should also verify that internal users have not been directed to the domain via phishing emails, and if such activity is observed, conduct credential compromise checks. Ongoing intelligence collection should focus on any future page content disclosures, additional blocklist appearances, or changes in detection scores.