secret[.]luxteam[.]live

Analysis of secret.luxteam.live indicates that the domain is currently active and classified as a generic phishing threat with an elevated risk rating. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, suggesting that at least one reputable anti‑phishing provider has deemed the host malicious. DNS resolution points to the IPv4 address 194.113.153.34, providing a concrete network indicator that can be used for firewall or DNS‑based blocking.

VirusTotal scans show that two out of ninety‑one security vendors flag the domain, confirming that multiple independent engines have identified suspicious behavior, though the majority have not raised an alert. No additional data such as Safe Browsing status, Open Threat Exchange entries, registrar information, SSL certificate details, HTTP response codes, trust scores, or page title have been disclosed, leaving those aspects of the infrastructure unverified at this time. Defenders should prioritize adding secret.luxteam.live to domain blocklists at perimeter and endpoint layers, enforce DNS sinkholing for the associated IP address, and monitor outbound traffic for connections to 194.113.153.34.

Continuous re‑evaluation of the domain’s detection status on VirusTotal and other threat intel platforms is advised, as the low detection count may evolve. Organizations that employ email filtering should ensure that URLs matching this domain are quarantined, and incident response teams should be prepared to investigate any credential submissions that could be directed to this host.