booking-com-dubai-shoooooopping[.]webflow[.]io

This domain, booking-com-dubai-shoooooopping.webflow.io, has been identified as a potential phishing site. It is currently active as of July 29, 2026, and has been flagged by PhishDestroy, indicating that it poses an elevated risk to users. The domain resolves to the IP address 104.18.36.248, which is associated with Cloudflare, a common web hosting provider. The domain was registered through Webflow on June 12, 2026, suggesting a relatively recent creation, which is often a characteristic of phishing infrastructure designed to evade detection for a short period.

The domain appears on one security blocklist, further supporting the assessment that it is involved in malicious activities. While VirusTotal shows that 2 out of 91 security vendors have flagged this domain, the low detection rate does not necessarily indicate a lower risk, as phishing sites can be designed to bypass certain security checks. The exact content of the webpage has not been analyzed, but the domain name suggests it may be attempting to mimic a legitimate booking or shopping site, possibly targeting users looking for travel or shopping deals in Dubai.

Defenders should take immediate action to block this domain within their network security solutions and educate users about the risks associated with visiting unverified or suspicious websites, especially those that appear to be mimicking legitimate services. It is recommended to monitor for any related infrastructure or subdomains and to report any additional findings to security teams or platforms. Regular updates to security software and maintaining a vigilant stance against phishing attacks are crucial in protecting against such threats.