# Phishing sites impersonating Magalu PhishDestroy has recorded 13 phishing domains impersonating Magalu since 2026-03-20, 3 of them in the last 30 days. The most used registrars are GoDaddy.com and Dynadot; the most common TLDs are .br and .com. Open Magalu only from its official app or a saved bookmark. 13Domains, all time 3Last 30 days 5Online at last check 0Confirmed takedowns ## New domains in the last 90 days Magalu phishing domains detected per day: 9 from 2026-07-25 to 2026-10-22; peak 2. ## How to tell a fake Magalu site Words most often added to the brand in reported domains: magazineluizabemestar, goatlas, magazineluiza, grupopromo, acessesaaquioffftododia, ofertasdehojeoficial, selecao, diadospais, quizmagazineluiza, fabulous. - Type the address yourself or use a bookmark; phishing links for Magalu arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Magalu does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Magalu phishing domains The 13 most recently detected domains impersonating Magalu Domain | First detected | Status at last check | Registrar | [cupomexclusiivoo-app.com](https://phishdestroy.io/domain/cupomexclusiivoo-app.com/) | 2026-10-13 | Offline | GoDaddy.com | [magazadamaga.com](https://phishdestroy.io/domain/magazadamaga.com/) | 2026-10-10 | Offline | Squarespace Domains | [magalu26anos.co](https://phishdestroy.io/domain/magalu26anos.co/) | 2026-09-25 | Offline | Dynadot | [eletromix.net.br](https://phishdestroy.io/domain/eletromix.net.br/) | 2026-09-14 | Online | — | [maga-zine-luiza.com](https://phishdestroy.io/domain/maga-zine-luiza.com/) | 2026-09-13 | Online | TUCOWS.COM | [fabulous-cucurucho-3d90fe.netlify.app](https://phishdestroy.io/domain/fabulous-cucurucho-3d90fe.netlify.app/) | 2026-08-22 | Offline | Netlify | [quizmagazineluiza.lol](https://phishdestroy.io/domain/quizmagazineluiza.lol/) | 2026-08-09 | Offline | Dynadot | [selecao-diadospais.com](https://phishdestroy.io/domain/selecao-diadospais.com/) | 2026-07-28 | Offline | GoDaddy.com | [ofertasdehojeoficial.vip](https://phishdestroy.io/domain/ofertasdehojeoficial.vip/) | 2026-07-28 | Offline | — | [acessesaaquioffftododia.com.br](https://phishdestroy.io/domain/acessesaaquioffftododia.com.br/) | 2026-07-21 | Offline | GODADDY | [magazineluiza-grupopromo.vip](https://phishdestroy.io/domain/magazineluiza-grupopromo.vip/) | 2026-07-18 | Online | DYNADOT | [goatlas.com.br](https://phishdestroy.io/domain/goatlas.com.br/) | 2026-06-10 | Online | GoDaddy.com | [magazineluizabemestar.com.br](https://phishdestroy.io/domain/magazineluizabemestar.com.br/) | 2026-03-20 | Online | — | [All 13 Magalu reports](https://phishdestroy.io/domain/?brand=Magalu) ## Where they are registered and hosted ### Registrars - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)2 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)2 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)1 - [DYNADOT](https://phishdestroy.io/registrar/dynadot/)1 - [GODADDY](https://phishdestroy.io/registrar/godaddy/)1 - Netlify1 - [TUCOWS.COM](https://phishdestroy.io/registrar/tucows/)1 - [Squarespace Domains](https://phishdestroy.io/registrar/squarespace/)1 ### Top-level domains - [.br](https://phishdestroy.io/tld/br/)4 - [.com](https://phishdestroy.io/tld/com/)4 - [.vip](https://phishdestroy.io/tld/vip/)2 - [.lol](https://phishdestroy.io/tld/lol/)1 - [.app](https://phishdestroy.io/tld/app/)1 - [.co](https://phishdestroy.io/tld/co/)1 ### Hosting networks - Amazon.com, Inc.5 - Oracle Corporation2 - GoDaddy.com, LLC1 - ORACLE-BMC-31898 - Oracle Corporation, US1 - Cloudflare, Inc.1 - IDC19 SOLUCOES EM TECNOLOGIA DA INFORMACAO LTDA1 - CONTABO Contabo GmbH, DE1 - AS13335 Cloudflare, Inc.1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Magalu; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/magalu/