maga6n[.]com

This domain, maga6n.com, is identified as a phishing site engaged in brand impersonation targeting Magazine Luiza, a well-known retail brand. Analysis of the page title and content structure confirms the intent to deceive users into believing they are interacting with the legitimate Magazine Luiza platform. No evidence of a crypto drainer kit or payment skimming was observed, but the site likely harvested login credentials or personal information under false pretenses. Infrastructure analysis reveals critical technical indicators: the domain was registered on December 10, 2025, through Amazon Registrar, Inc., and resolves to the IP address 3.171.76.50, hosted on AS16509 within the United States. The domain lacks an SSL certificate, increasing exposure to interception risks. VirusTotal reports 19 out of 95 security vendors flagging the domain as malicious. It appears on two independent security blocklists and was proactively blocked by at least two threat intelligence platforms. No Google Safe Browsing (GSB) entries were recorded at the time of analysis. The domain has since been taken offline, likely following detection and reporting by security researchers or hosting provider intervention. While the immediate threat is mitigated, the infrastructure remains a potential risk due to the recent registration date and association with a known registrar that may be exploited for future malicious campaigns. Organizations are advised to update blocklists with the domain and IP, monitor for related domains using similar naming conventions, and educate users on verifying legitimate URLs before entering credentials. Persistent vigilance is required, as threat actors often reuse infrastructure for subsequent attacks.