magma[.]stakingsrewards[.]club

This domain, magma.stakingsrewards.club, was registered on February 21, 2026 and is currently listed as offline. The site presents a page title of “Google”, indicating an attempt to impersonate the Google brand. The hosting infrastructure resolves to IP address 142.250.185.196, which belongs to AS15169 Google LLC and is geolocated to the United States. Despite the IP being owned by Google, the domain itself is unrelated to the legitimate corporation and is being used for credential phishing.

The SSL certificate presented is identified as “WE2”, which does not align with Google’s standard certificate authorities, further confirming a mismatch between the claimed brand and the underlying TLS configuration. Reputation metrics are uniformly negative: the Gridinsoft trust score is 0 out of 100, and the domain appears on one security blocklist. PhishDestroy has already blocked the domain, and VirusTotal reports that 16 of 93 scanning engines flag the domain as malicious. The combination of brand impersonation, low trust score, multiple vendor detections, and blocklist presence classifies the domain as a high‑confidence credential‑phishing threat.

Uncertainty remains around the exact phishing payload or landing pages because the site is offline and no additional content has been captured. Defenders should continue to enforce blocklist rules that include this domain, monitor outbound DNS queries for the domain or its associated IP, and consider adding the IP address to network‑level deny lists. Incident response teams should treat any authentication attempts to this domain as compromised and advise users to reset credentials that may have been entered. Ongoing threat‑intel feeds should be checked for any re‑registration attempts or related domains that reuse the same naming pattern or hosting infrastructure.