magacoinsale[.]com

This domain, magacoinsale.com, is assessed as an elevated-risk cryptocurrency phishing site based on infrastructure analysis and confirmed detection by multiple security vendors. Registered on February 21, 2026, through Tucows Domains Inc., the domain currently resolves to 104.21.34.84, an IP address assigned to Cloudflare, Inc. (AS13335) in the United States. The site is served behind Cloudflare’s network, as indicated by detected technologies and nameservers (kareem.ns.cloudflare.com, meadow.ns.cloudflare.com), which may obscure direct hosting details and complicate attribution. The SSL certificate is issued by Google Trust Services (WE1), a common but not inherently malicious provider.

At the time of assessment, the domain returns an HTTP 403 status with the page title 'Suspected phishing site | Cloudflare,' suggesting either manual takedown action or automated detection by Cloudflare’s security systems. The domain appears on five security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura, indicating broad recognition as malicious. Gridinsoft assigns a trust score of 0/100, further supporting the phishing classification. While VirusTotal reports four detections from 93 vendors, this partial coverage does not diminish the domain’s confirmed malicious status.

No evidence links this domain to a specific phishing kit or targeted brand beyond its suggestive name, and the exact content or lure type remains unconfirmed. Defenders should treat this domain as actively hostile and prioritize blocking it at DNS, proxy, and endpoint layers. Given its recent registration and Cloudflare-hosted infrastructure, monitoring for related domains or IP shifts is recommended. The domain is currently offline, but historical associations or re-registration attempts may warrant continued vigilance.