bookkingcoom-dubai[.]webflow[.]io

As of July 29, 2026, the domain bookkingcoom-dubai.webflow.io has been confirmed as a phishing site, posing an elevated risk to users. The domain resolves to the IP address 104.18.36.248 and is registered through the Webflow platform. Analysis indicates that the domain is actively being used for phishing activities, as evidenced by its presence on one security blocklist and being flagged by 8 out of 91 security vendors on VirusTotal.

The domain is also blocked by PhishDestroy, a known security service that identifies and mitigates phishing threats. While the exact content of the website has not been analyzed, the domain's association with Webflow and its IP address suggest it may be leveraging a legitimate web development platform to host malicious content. Infrastructure analysis reveals that the domain is hosted on a server with a known history of hosting suspicious or malicious sites.

Defenders are advised to block this domain at the network level and educate users to avoid visiting it. Additionally, monitoring for any related subdomains or IP addresses is recommended to prevent further phishing attempts. Given the elevated risk level, regular updates on the domain's status and any new indicators of compromise should be conducted.