magmalp[.]com

The domain magmalp.com is currently active and classified as a generic phishing site with a high risk rating. Technical analysis shows the domain resolves to the Cloudflare‑owned IP address 104.21.31.130 located in Canada. The TLS certificate is issued by Google Trust Services (WE1), indicating standard HTTPS termination via Cloudflare. DNS resolution uses the Cloudflare nameservers nucum.ns.cloudflare.com and stanley.ns.cloudflare.com. An HTTP request returns a 403 status code and the page title is “Just a moment…”, which is consistent with Cloudflare’s interstitial challenge page rather than a visible phishing payload. VirusTotal records indicate that three of ninety‑one scanned vendors flagged the domain, suggesting some malicious indicators were detected. AlienVault OTX has referenced the domain in twelve separate threat‑intel pulses, and it appears on one public blocklist. The registration record lists NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. The domain is also listed as blocked by PhishDestroy. No additional contextual information, such as the specific phishing lure or targeted brand, is available from the current intelligence. Defenders should add magmalp.com to web filtering and DNS sinkhole policies, monitor outbound connections to the associated Cloudflare IP, and consider sharing the indicator with upstream threat‑sharing platforms. Continuous re‑evaluation is advised, as the site may evolve or host active phishing pages behind the current 403 response.