qvjiybooking-com--dubai[.]webflow[.]io

The domain qvjiybooking-com--dubai.webflow.io was registered on June 12, 2026 through the Webflow platform and resolves to the IP address 104.18.36.248, which is part of Cloudflare's network. The domain appears on a single security blocklist and is listed by PhishDestroy as an active phishing site. VirusTotal analysis shows that two out of ninety‑one scanning engines flagged the domain, indicating a modest level of detection confidence.

The limited detection footprint, combined with the recent registration date, suggests a short‑lived campaign that relies on the credibility of the Webflow hosting service to evade simple reputation checks. No additional metadata such as ASN, country, SSL certificate details, HTTP status codes, or page title is currently available in the intelligence feed, leaving the content of the landing page unverified. Defenders should block the domain at the DNS and proxy layers, monitor outbound connections to the associated IP, and add the host to internal blocklists.

Because the site is hosted on a shared infrastructure, other malicious actors may reuse the same IP, so correlation with other observed indicators is advised. Continuous re‑scanning with multi‑engine services is recommended to capture any future changes in detection status. Organizations should also review alerts from PhishDestroy and similar threat‑intelligence providers for related activity.