mall[.]luxustroe[.]vip

This domain, mall.luxustroe.vip, was registered on February 21, 2026 and is presently listed as offline. Passive DNS resolution shows the hostname pointing to the IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The SSL certificate presented for the host is identified as “WE1”, indicating a publicly‑trusted certificate but offering no indication of legitimate ownership.

The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. VirusTotal analysis reports that 15 of 93 scanning engines flagged the domain as malicious, consistent with a generic phishing classification. No further public intelligence such as page title, brand targeting, or malware kit has been released, leaving the exact phishing payload or credential‑harvesting technique unknown.

Given the combination of recent registration, Cloudflare hosting, valid TLS, and multi‑engine detection, the infrastructure aligns with known phishing hosting patterns. Defenders should continue to block the domain at DNS and proxy layers, monitor for re‑registration or resurrection of the hostname, and incorporate the observed IP address into threat‑intel feeds. Ongoing observation of Cloudflare‑associated abuse reports is recommended, as the provider’s shared address space can be reused by unrelated actors.