urlkey[.]booking-dubaii-hotels[.]webflow[.]io

The domain urlkey.booking-dubaii-hotels.webflow.io was registered on June 12, 2026 through the Webflow platform. It resolves to the IP address 172.64.151.8, which is associated with Webflow's hosting infrastructure. VirusTotal scans have flagged the domain in 2 of 91 security vendor engines, indicating a low but non‑zero detection rate. The domain is currently listed on a single security blocklist and is actively blocked by the PhishDestroy service, reinforcing its classification as a phishing‑related resource.

The threat intelligence profile assigns the domain an elevated risk level and marks it as active, with a generic phishing tag. Evidence confirms that the domain is being used in a phishing campaign, but the specific payload, targeted brand, and landing‑page content have not been publicly disclosed. No additional data such as SSL certificate details, HTTP response codes, or page title have been provided, leaving those aspects of the infrastructure unverified. Likewise, the geographic location of the hosting IP and any ASN information are not supplied in the available feed.

Defenders should add the domain to outbound filtering rules and ensure that any connections to 172.64.151.8 are blocked or closely monitored. Because the domain is hosted on a legitimate SaaS platform, traditional URL‑based blocklists may miss future variations; continuous monitoring of Webflow‑hosted subdomains and periodic re‑scanning on VirusTotal are recommended. Organizations using email or web gateways should enforce strict URL reputation checks and consider sandboxing any URLs that resolve to this host before allowing user interaction.