urlkey[.]bookingcomsfdubaihotels[.]webflow[.]io

The domain urlkey.bookingcomsfdubaihotels.webflow.io was registered on June 12, 2026 through the Webflow platform and is currently listed as active with an elevated risk rating. DNS resolution points to IP address 104.18.36.248, indicating the site is hosted on infrastructure commonly associated with large content delivery networks. The domain has been flagged by the PhishDestroy sinkhole, confirming that it is part of a known phishing campaign.

VirusTotal analysis shows that three out of ninety‑one security vendors have identified the domain as malicious, providing additional corroboration of its illicit nature. It also appears on one public security blocklist, further demonstrating that independent threat‑intelligence feeds have observed abusive activity linked to this host. No public page title or additional content metadata is available at this time, so the specific lure or credential‑stealing vector cannot be described beyond the generic phishing classification supplied.

Defenders should ensure that the domain is blocked at network and endpoint layers, add the IP address 104.18.36.248 to deny‑lists where appropriate, and monitor for any related subdomains or newly‑registered look‑alike domains created through the same registrar. Continuous re‑scanning with VirusTotal or similar multi‑engine services is advised to capture any changes in vendor detection scores.