dubai-booking-com-flight-tickets[.]webflow[.]io

The domain dubai-booking-com-flight-tickets.webflow.io was registered on June 12, 2026 through the Webflow platform and currently resolves to the IP address 104.18.36.248. Infrastructure analysis shows the host is part of the Cloudflare network, which is commonly leveraged by both legitimate services and malicious actors to obscure origin. The domain is listed on a security blocklist and has been actively blocked by the PhishDestroy threat‑intelligence feed, indicating that it is being used in a phishing campaign targeting users seeking flight ticket bookings.

VirusTotal scans report that 2 out of 91 security vendors have flagged the domain as malicious, providing additional corroboration of its abusive nature. No further public intelligence such as Safe Browsing alerts, OTX mentions, or detailed page metadata is presently available, leaving the exact content and phishing technique unverified. Defenders should treat the domain as high‑confidence malicious, enforce network‑level deny rules for the associated IP and hostname, and incorporate the domain into endpoint and email filtering policies.

Continuous monitoring of the IP address for any changes in hosting or additional detection signatures is advised, as well as periodic re‑scanning with VirusTotal or similar services to capture evolving vendor assessments. Organizations that process travel‑related communications should educate users about unsolicited booking links and advise verification of URLs before credential entry.