utm-builder-magma[.]netlify[.]app

Technical Threat Report: utm-builder-magma.netlify.app

The website utm-builder-magma.netlify.app presents itself as a "Magma relation source generator" while impersonating the Google brand. This is an impersonation scam, where the site likely mimics Google's interface or branding to trick users into providing sensitive information or performing actions under false pretenses. The primary threat is social engineering, as flagged by Google Safe Browsing, which could lead to credential theft or unauthorized data access.

Technical evidence shows the site is flagged by 12 out of 95 VirusTotal vendors, with detections from ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CRDF. Google Safe Browsing specifically labels it with a SOCIAL_ENGINEERING threat. The domain is hosted at IP address 98.84.224.111 in the United States, under AS14618 (Amazon.com, Inc.), and registered through Netlify. The SSL certificate is issued by DigiCert Inc, using DigiCert Global G2 TLS RSA SHA256 2020 CA1.

The site is currently active, with a GridinSoft trust rating of 0 out of 100 and inclusion on one blocklist. The risk level is high due to the active impersonation of a trusted brand and confirmed social engineering flags. Users should avoid interacting with this site to prevent potential compromise.