Magalu

E-commerce & retail Brazilmagazineluiza.com.brRank 171 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
6
6 on phishing hosts
Registered lookalikes
49
4 listed by a source or an address list
Official domains
9
verified from Magalu's own sites and records

Certificate findings for Magalu

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Magalu's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 9 findings, grouped by hostname

  1. magazineluiza.com BR · AS52580 · Azion Technologies Ltda.5 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 27 y ago
    DetailsHide
    Hostname
    magazineluiza.com
    First seen
    2026-11-03 19:22 UTC
    DNS
    Resolves · checked 2026-11-05 09:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 179.191.177.17.
    1. Resolved to 179.191.177.17
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Brand
    Magalu
    Addresses
    179.191.177.17 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    179.191.177.1 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    179.191.177.9 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    179.191.177.33 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    179.191.177.41 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    Domain
    magazineluiza.com
    Registered
    2000-01-12 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:39 UTC

    Suggest a correction

  2. www.magalu.cloud BR · AS52580 · Azion Technologies Ltda.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 6 y ago
    DetailsHide
    Hostname
    www.magalu.cloud
    First seen
    2026-11-01 00:15 UTC
    First published
    2026-11-01 01:02 UTC
    DNS
    Resolves · checked 2026-11-05 01:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 179.191.177.9.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 179.191.177.9
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 23:12 UTC to 2027-01-29 23:12 UTC
    Logged 2026-11-01 00:11 UTC in Google PlumbersArms2027h1, entry 547,804,904
    SHA-256 044d7bd969a1c3c7295b0326485be0f7a7f074a610a1baa3bd5a48f1092764e3
    Public key SHA-256 5d821c712c30640535763bed30be23cb9975c5dd5948a3cd54d63cbe7255ec7d
    Brand
    Magalu
    Addresses
    179.191.177.9 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    179.191.177.33 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    Domain
    magalu.cloud
    Registered
    2021-01-20 · NAMECHEAP
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  3. docs.magalu.cloud BR · AS52580 · Azion Technologies Ltda.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 6 y ago
    DetailsHide
    Hostname
    docs.magalu.cloud
    First seen
    2026-11-01 00:15 UTC
    First published
    2026-11-01 01:02 UTC
    DNS
    Resolves · checked 2026-11-05 01:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 179.191.177.9.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 179.191.177.9
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-31 23:12 UTC to 2027-01-29 23:12 UTC
    Logged 2026-11-01 00:11 UTC in IPng Networks Halloumi2027h1, entry 325,484,072
    SHA-256 210673842c1367abcb54bc80a771ce0f68e44551cde97cc7a334ff20f312795c
    Public key SHA-256 ef1a4a31716abc5e9db1c4915f33740d412bda0ce3f402fa93a11ef8efebf624
    Brand
    Magalu
    Addresses
    179.191.177.9 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    179.191.177.33 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    Domain
    magalu.cloud
    Registered
    2021-01-20 · NAMECHEAP
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  4. console.magalu.cloud BR · AS52580 · Azion Technologies Ltda.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 6 y ago
    DetailsHide
    Hostname
    console.magalu.cloud
    First seen
    2026-11-01 00:15 UTC
    First published
    2026-11-01 01:02 UTC
    DNS
    Resolves · checked 2026-11-05 01:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 179.191.177.9.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 179.191.177.9
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 23:12 UTC to 2027-01-29 23:12 UTC
    Logged 2026-11-01 00:11 UTC in Google PlumbersArms2027h1, entry 547,805,601
    SHA-256 73f8dec85b9d1914ddeeab5701feab8f06282e86c2faa4534f75906ffda0b053
    Public key SHA-256 9e505e4d37f3e7d4385df54c30541d849e32c49e67ddd3788083a6b9a3d8ba12
    Brand
    Magalu
    Addresses
    179.191.177.9 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    179.191.177.33 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    Domain
    magalu.cloud
    Registered
    2021-01-20 · NAMECHEAP
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  5. portal.magalu.cloud BR · AS52580 · Azion Technologies Ltda.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC policy noneRegistered 6 y ago
    DetailsHide
    Hostname
    portal.magalu.cloud
    First seen
    2026-10-31 00:11 UTC
    First published
    2026-10-31 00:45 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 179.191.177.9.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 179.191.177.9
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-30 23:09 UTC to 2027-01-28 23:09 UTC
    Logged 2026-10-31 00:08 UTC in IPng Networks Gouda2027h1, entry 274,168,896
    SHA-256 1d442b18f93f5baf932606609efe6ca89a0558058209de4a626650b9e61596cd
    Public key SHA-256 bbcc06ed9f0e7168b5d151332f428bbeb6bc41360df9353b65a1e9bc06695c89
    Brand
    Magalu
    Addresses
    179.191.177.9 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    179.191.177.33 · Brazil · AS52580 AS52580 - Azion Technologies Ltda.
    Domain
    magalu.cloud
    Registered
    2021-01-20 · NAMECHEAP
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  6. r.financeiro.app-magazineluiza.com FR · AS200484 · SENDINBLUE-ASN Sendinblue S…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    r.financeiro.app-magazineluiza.com
    First seen
    2026-10-30 01:11 UTC
    First published
    2026-10-30 01:51 UTC
    DNS
    Not resolving since 2026-10-31 · checked 2026-11-05 02:04 UTC
    Checks
    Overdue since 2026-10-31 02:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.246.243.65.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.246.243.65
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-10-30 00:09 UTC to 2027-01-28 00:09 UTC
    Logged 2026-10-30 01:08 UTC in IPng Networks Halloumi2027h1, entry 307,013,668
    SHA-256 12db0761b872c6496ef2050410dcbfc53fe6526d6a30040056ee5ac52bf09fb4
    Public key SHA-256 54f708c28e89a0a3f9a56984b4df78c335d0df840dc0cae98ff7e29e24afed13
    Brand
    Magalu
    Addresses
    172.246.243.65 · France · AS200484 SENDINBLUE-ASN Sendinblue SAS
    Domain
    app-magazineluiza.com
    Registered
    2026-10-29 · Squarespace Domains LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  7. www.alles-magalu.de DE · AS3320 · DTAG Deutsche Telekom AG
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.alles-magalu.de
    First seen
    2026-10-29 07:11 UTC
    First published
    2026-10-29 07:46 UTC
    DNS
    Resolves · checked 2026-11-05 07:51 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 80.150.6.143.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 80.150.6.143
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-29 06:07 UTC to 2027-01-27 06:07 UTC
    Logged 2026-10-29 07:06 UTC in Google ParcelYard2027h1, entry 501,466,869
    SHA-256 0486480d76e031e47670c47b7d4bb193d34a135d1cc5b0cadffb8a9e3f51fb45
    Public key SHA-256 ed9b20e02386b669d56411c5e9401bd653726521d743d4bea832dbd5f8295d20
    Brand
    Magalu
    Addresses
    80.150.6.143 · Germany · AS3320 DTAG Deutsche Telekom AG
    Domain
    alles-magalu.de
    MX
    Receives mail at smtp-01.tld.t-online.de, smtp-02.tld.t-online.de
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  8. lojas-magalu.com SG · AS63949 · Akamai Connected Cloud
    ReportedPhishing hostAkamai LinodeReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 14 d ago
    DetailsHide
    Hostname
    lojas-magalu.com
    First seen
    2026-10-27 14:11 UTC
    First published
    2026-10-28 05:36 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-28 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:04 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched the new listing
    3. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 139.144.200.145.
    1. Resolved to 139.144.200.145
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    PhishDestroy
    Brand
    Magalu
    Addresses
    139.144.200.145 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (139.144.200.145): a cloud provider. It rents servers and addresses to its customers.
    Domain
    lojas-magalu.com
    Registered
    2026-10-22 · GoDaddy.com, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Magalu when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in E-commerce & retail

All brands →