magma[.]airsdropalert[.]click

magma.airsdropalert.click is a dangerous phishing site designed to trick users into believing they are logging into a legitimate Google or Gmail account page. By impersonating the Gmail brand, the site attempts to steal login credentials, which could lead to account takeover, identity theft, and unauthorized access to sensitive personal or financial information. This type of threat is particularly insidious because it preys on the trust users place in well-known services like Google, and the fake login page can look nearly identical to the real one.

PhishDestroy's investigation reveals that this domain was created on November 5, 2025, through the registrar Dynadot LLC, and was flagged by 13 out of 95 security vendors on VirusTotal, indicating a high level of malicious consensus. The site resolved to IP address 142.251.111.106 and used an SSL certificate from Google Trust Services, which may have been an attempt to appear legitimate. The page title was set to "Google," further reinforcing the impersonation. Additionally, the domain appears on one security blocklist, confirming its malicious nature. Fortunately, the site has been taken offline, but its short lifespan underscores how quickly such threats can emerge and disappear.

If you visited magma.airsdropalert.click and entered any login credentials, you should immediately change your Gmail password and enable two-factor authentication. Also, review your account for any suspicious activity, such as unauthorized forwarding rules or password changes. Run a full antivirus scan on your device to check for any malware that might have been downloaded. Stay vigilant against similar phishing attempts by always verifying URLs before entering sensitive information and using browser extensions that block known malicious sites.