urlkey[.]bbookingcomdubai[.]webflow[.]io

Analysis indicates that the domain urlkey.bbookingcomdubai.webflow.io was registered on June 12, 2026 through the Webflow hosting platform. The domain has been added to a security blocklist and is flagged by PhishDestroy, confirming active malicious use. VirusTotal scans show that one out of ninety‑one antivirus engines identified the domain as malicious, reinforcing the suspicion.

No additional infrastructure details such as IP address, ASN, or SSL certificate information are publicly available at this time, and the HTTP response code has not been disclosed. The absence of a page title or brand reference in the available intelligence prevents identification of the exact victim brand the site may be attempting to impersonate. Nevertheless, the combination of recent creation, hosting on a free‑form web‑development service, blocklist inclusion, and a positive detection by a security vendor suggests a high likelihood of phishing activity.

Defenders should consider adding urlkey.bbookingcomdubai.webflow.io to deny‑list rules across perimeter and endpoint solutions, monitor DNS queries for this FQDN, and enforce URL filtering that blocks access to Webflow‑hosted subdomains matching this pattern. Ongoing collection of network traffic and web‑page snapshots is recommended to confirm the payload and to enrich threat intelligence. Organizations should also educate users about unsolicited login requests that reference the domain, as the short lifespan of the domain aligns with typical phishing campaign turnover.