# cuponsluiza.online — MALICIOUS

> cuponsluiza.online poses a high phishing risk pretending to be Magazine Luiza. Avoid this site and protect your data now.

## Summary
PhishDestroy identifies cuponsluiza.online as a high-risk phishing site impersonating the well-known Magazine Luiza brand. This scam aims to steal personal and financial information from unsuspecting users.

The phishing works by mimicking the legitimate store’s appearance to trick visitors into entering sensitive data. It resolves to IP 63.176.8.218 and remains active despite detection by multiple security vendors and blocklists.

If you visited this domain, immediately change your passwords and monitor your accounts for suspicious activity. Report the incident to your security team to help prevent further damage.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Magazine Luiza

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 63.176.8.218
- IP Country: DE
- IP City: Frankfurt am Main
- IP Org: AS16509 Amazon.com, Inc.
- SSL Issuer: E7

## Detection Status
- VirusTotal: 16 vendors flagged
  Vendors: ["Criminal IP", "alphaMountain.ai", "BitDefender", "CRDF", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "Phishing Database", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019accbf-9a18-71c1-b42e-422f2aeb4560.png
- PhishDestroy: https://phishdestroy.io/domain/cuponsluiza.online/
- LLM endpoint: https://phishdestroy.io/domain/cuponsluiza.online/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cuponsluiza.online/
Last updated: 2026-03-19