bookiing-comduubai[.]webflow[.]io

Analysis of the domain bookiing-comduubai.webflow.io indicates active generic phishing activity as of the report date, July 29, 2026. The domain was registered on June 12, 2026 through the Webflow platform, a legitimate website‑building service that can be leveraged for malicious hosting. DNS resolution points to the IP address 104.18.36.248, which aligns with Webflow's infrastructure and does not provide additional attribution beyond the hosting provider.

VirusTotal scans show that 2 of 91 security vendors have flagged the domain, confirming that at least a subset of detection engines recognize malicious behavior. The site is currently listed on one public security blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that community‑driven defenses have begun to surface the threat. Risk level is assessed as elevated and the status remains active, suggesting ongoing exploitation.

Observable evidence is limited to registration metadata, DNS resolution, and the modest detection count; no public page title, SSL certificate details, or HTTP response codes have been disclosed, leaving the content of the landing page unverified. Defenders should immediately add bookiing-comduubai.webflow.io to URL filtering and network blocklists, monitor for DNS queries to the associated IP, and consider broader Webflow‑hosted domains as potential vectors. Continuous re‑evaluation is advised, as additional detection signals may emerge from further scanning or user reports.