bookingcomdesertsafari-dubai[.]webflow[.]io

The domain bookingcomdesertsafari-dubai.webflow.io was registered on 12 June 2026 through the Webflow platform. DNS resolution points to the IP address 104.18.36.248, an edge node commonly used for content delivery. The domain appears on a single security blocklist and is actively blocked by PhishDestroy, indicating that at least one defensive feed has categorized it as malicious.

VirusTotal analysis shows that two of ninety‑one scanning engines returned a positive detection, confirming the presence of malicious indicators despite the majority of scanners reporting a clean result. The recent creation date, combined with the use of a reputable hosting service, suggests a short‑lived infrastructure typical of phishing campaigns that rely on fast provisioning and rapid takedown. No public page title, SSL certificate details, or additional reputation scores are available in the current intelligence set, leaving the exact content and lure technique unverified.

Defenders should treat the domain as a confirmed phishing vector: add it to outbound and inbound blocklists, monitor DNS queries for the associated IP, and consider employing URL filtering that references the PhishDestroy feed. Continuous re‑evaluation is advised in case further detections emerge or the site begins serving additional payloads.