boookingcomdubai[.]webflow[.]io

Analysis of boookingcomdubai.webflow.io indicates that the domain was created on 12 June 2026 and is registered through the Webflow platform, a service that provides hosted website construction and CDN integration. DNS resolution returns the address 104.18.36.248, an IP known to belong to a large content‑delivery network, suggesting the site benefits from distributed hosting and potential anonymity of the underlying server. VirusTotal has recorded 11 positive detections out of 91 submitted security scanners, confirming that multiple independent engines identify malicious activity associated with the domain.

The domain is currently listed on a single public security blocklist and is actively blocked by the PhishDestroy feed, providing additional corroboration of its malicious intent. The risk rating assigned by the reporting entity is elevated, reflecting the combination of recent creation, hosting choice, and detection count. No public evidence has been released regarding the site’s SSL certificate, HTTP response codes, page title, or any observed payload, leaving those attributes unverified at this time.

Defenders should immediately add boookingcomdubai.webflow.io to URL filtering rules, enforce DNS sink‑holing where possible, and monitor outbound connections to the resolved IP address. Continuous re‑evaluation is advised, as additional telemetry such as Safe Browsing or Open Threat Exchange observations may become available.