lussoshop[.]au

This domain, lussoshop.au, has been identified as a fake login phishing site designed to harvest user credentials under false pretenses. Analysis confirms its current status as taken down, though prior activity remains a concern for historical exposure. The domain was actively impersonating legitimate services to deceive users into submitting sensitive login information, a tactic commonly associated with credential theft campaigns. Infrastructure analysis reveals the domain was registered through Tucows Domains Inc. and resolved to the IP address 217.21.85.49, hosted under AS47583 by Hostinger International Limited in India. Security vendors flagged the domain as malicious, with 20 out of 95 VirusTotal engines detecting it as phishing. The SSL certificate was issued by Let’s Encrypt (R12), a detail often exploited by threat actors to lend false legitimacy. The domain appeared on one security blocklist and was blocked by PhishDestroy, further corroborating its malicious intent. The page title displayed 'Account Suspended,' a common social engineering tactic to create urgency and prompt user action. As of the latest assessment, lussoshop.au has been taken down, mitigating immediate risk. However, users who may have interacted with the domain should assume credential exposure and take corrective measures. It is recommended to reset passwords for any accounts accessed during the period of activity, enable multi-factor authentication where available, and monitor financial or sensitive accounts for unauthorized activity. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts. Security teams are advised to review logs for connections to 217.21.85.49 or related indicators to identify potential compromise.