i-mglu[.]com

The domain i-mglu.com was registered on October 26, 2025 through Amazon Registrar, Inc. and is currently taken offline. DNS resolution points to the IP address 99.84.152.97, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in Germany. The authoritative nameservers are ns-1529.awsdns-63.org, ns-161.awsdns-20.com, ns-1755.awsdns-27.co.uk, and ns-620.awsdns, all of which are part of Amazon's Route 53 service. No SSL/TLS certificate is presented, indicating the site did not serve traffic over HTTPS.

The HTTP response, when it was active, returned a page titled "Magazine Luiza," suggesting an attempt to impersonate the Brazilian retailer, although the content of the page has not been captured for further analysis. The domain appears on a single security blocklist and is listed in fifteen AlienVault OTX pulses, reflecting moderate community awareness of its malicious use. VirusTotal scans recorded sixteen detections out of ninety‑five security vendors, reinforcing the suspicion of abusive activity.

Gridinsoft assigned a trust score of 0 out of 100, and PhishDestroy has actively blocked the domain. Given the observed infrastructure—including the Amazon‑hosted IP, lack of encryption, and multiple threat‑intel references—defenders should add i-mglu.com to network and endpoint blocklists, monitor DNS queries for the domain and its associated nameservers, and enforce TLS inspection for any residual traffic. Continuous re‑evaluation is advised in case the domain is re‑hosted or re‑activated, as the current offline status does not preclude future malicious deployments.