magabit[.]net

The domain magabit.net is a confirmed phishing site engaged in brand impersonation targeting Bitcoin users. It presents itself as a legitimate cryptocurrency mining community but operates as a crypto scam, tricking victims into depositing funds under false pretenses. No drainer kit was identified, but the site was actively used for fraudulent financial schemes. As of the latest verification, magabit.net has been taken offline.

Technical indicators confirm the malicious nature of magabit.net. The domain was flagged by 2 of 95 VirusTotal security vendors, including Certego and Seclookup, and appears on 1 security blocklist (PhishDestroy). Registered through GoDaddy.com, LLC on March 08, 2025, it resolved to the IP address 162.159.135.42, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title promoted a fraudulent Bitcoin mining scheme. Additional detections include a Gridinsoft trust score of 1/100 and presence in 1 AlienVault OTX threat intelligence pulse. Technologies detected on the site included WordPress, MySQL, PHP, and third-party services like Google Maps and YouTube.

Victims of magabit.net should immediately cease all interactions and secure their cryptocurrency assets by revoking any token approvals granted to the site. If funds were deposited, transfer remaining assets to a new wallet and monitor for unauthorized transactions. Report the domain to relevant platforms, including Google Safe Browsing, the Anti-Phishing Working Group (APWG), and local cybercrime authorities. Enable two-factor authentication on all financial and crypto-related accounts to prevent further compromise.