airlux-flights[.]com

This domain, airlux-flights.com, is flagged as a generic phishing site impersonating AirLux, a commercial airline brand. Analysis indicates the infrastructure is designed to deceive users into purchasing fraudulent flight tickets, particularly targeting business and first-class fares. The site remains active and operational as of the latest verification. Infrastructure analysis reveals the domain was registered on June 22, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 104.21.43.14 and uses an SSL certificate issued by Google Trust Services, providing a false sense of security. Despite its active status, the domain has not been flagged by any of the 95 vendors on VirusTotal, indicating either recent deployment or evasion techniques. No blocklist entries or trust score downgrades were observed at the time of assessment. Current risk assessment places this domain under investigation due to its active phishing operations and lack of detection by security vendors. Users are advised to avoid entering payment details or personal information on this site. Network administrators should monitor traffic to 104.21.43.14 and consider blocking the domain at the DNS or proxy level. Financial institutions are recommended to flag transactions linked to this domain for potential fraud review. Continuous monitoring of newly registered domains with similar naming patterns is advised to detect emerging threats.