lumiq[.]click

lumiq.click was observed on August 03, 2026 as an active generic phishing infrastructure. VirusTotal scans show that 2 of 91 security vendors have flagged the domain, indicating that at least a small subset of AV engines have identified malicious behavior associated with it. The domain also appears on a single public blocklist and is actively blocked by the PhishDestroy mitigation service, reinforcing its classification as a phishing resource.

No additional public intelligence such as registrar details, hosting IP, SSL certificate information, or HTTP response codes is presently available, limiting the depth of infrastructure profiling. The limited detection footprint suggests a possibly recent deployment or a low‑volume campaign targeting specific victims. Defenders should add lumiq.click to outbound and inbound filtering rules, monitor DNS queries for resolutions to this domain, and ensure that any email gateway or web proxy solutions reference the latest blocklist feeds that include it.

Continuous re‑scanning on VirusTotal and similar platforms is advised to capture any future changes in detection rates. Organizations should also educate users about unsolicited communications that request credential entry, as the domain is likely used to harvest login details. The elevated risk rating reflects the confirmed malicious activity despite the modest number of detections, and the active status warrants immediate precautionary controls.